quay.io/argoproj/argocd:v3.5.4 container image

Quay.io

Scanned 8 Oct 2026

Deployed by 4 of 18,053 indexed charts (latest versions) at this tag.Quay.io all tags of quay.io/argoproj/argocd

quay.io/argoproj/argocd:v3.5.4 resolved to 49dff79439bb, scanned 8 Oct 2026: 171 findings, 0 critical; deployed by 4 charts, among them argo-cd, argo-cd and argo-cd.

Radar Score

1,6660018153

171 findings on digest 49dff79439bb · scanned 8 Oct 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
v3.5.4resolves to	49dff79439bb	4 charts	today	0018153	1,666

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

171 distinct on this digest

Findings for digest 49dff79439bb as scanned on 8 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 8 Oct 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-48962	perl@5.40.1-7ubuntu0.3	no fix listed
Low	UBUNTU-CVE-2026-9538	perl@5.40.1-7ubuntu0.3	no fix listed
Low	GO-2025-4014	stdlib@go1.24.0	1.24.8
Low	GO-2026-6303	golang.org/x/crypto@v0.36.0	0.55.0
Low	GO-2026-6354	golang.org/x/crypto@v0.36.0	0.56.0
Low	GO-2025-4007	stdlib@go1.24.0	1.24.9
Low	UBUNTU-CVE-2026-93990	expat@2.7.4-1ubuntu0.2	no fix listed
Low	GO-2025-4013	stdlib@go1.24.0	1.24.8
Low	UBUNTU-CVE-2026-48961	perl@5.40.1-7ubuntu0.3	no fix listed
Low	GO-2025-3749	stdlib@go1.24.0	1.24.4
Low	GO-2026-5841	github.com/klauspost/compress@v1.18.0	1.18.7
Low	GO-2025-3956	stdlib@go1.24.0	1.23.12
Low	GO-2026-4946	stdlib@go1.25.3	1.25.9
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.36.0	0.52.0
Low	GO-2025-3849	stdlib@go1.24.0	1.23.12
Low	GHSA-hc8v-wwc9-vgxm	github.com/go-git/go-git/v5@v5.19.1	5.19.2
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.38.0	0.55.0
Low	GHSA-fxhp-mv3v-67qp	oras.land/oras-go/v2@v2.6.1	2.6.2
Low	GO-2026-4970	stdlib@go1.25.3	1.25.12
Low	GHSA-qgq7-7hm3-q39j	github.com/go-git/go-git/v5@v5.19.1	5.19.2
Low	UBUNTU-CVE-2026-76642	util-linux@2.41.3-3ubuntu2.2	no fix listed
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.36.0	0.52.0
Low	GO-2025-4012	stdlib@go1.24.0	1.24.8
Low	UBUNTU-CVE-2026-103111	pcre2@10.46-1build1	no fix listed
Low	GO-2025-3887	helm@4.2.1	no fix listed
Low	GO-2025-3888	helm@4.2.1	no fix listed
Low	UBUNTU-CVE-2026-78408	util-linux@2.41.3-3ubuntu2.2	no fix listed
Low	GO-2026-4980	stdlib@go1.25.3	1.25.10
Low	UBUNTU-CVE-2026-7017	perl@5.40.1-7ubuntu0.3	no fix listed
Low	GO-2026-4440	golang.org/x/net@v0.38.0	0.45.0
Low	GHSA-j5w8-q4qc-rx2x	golang.org/x/crypto@v0.36.0	0.45.0
Low	GO-2025-4011	stdlib@go1.24.0	1.24.8
Low	GO-2025-4015	stdlib@go1.24.0	1.24.8
Low	GO-2026-4441	golang.org/x/net@v0.38.0	0.45.0
Low	GO-2026-4603	stdlib@go1.25.3	1.25.8
Low	GO-2025-4175	stdlib@go1.25.3	1.24.11
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.81.1	1.83.1
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.36.0	0.52.0
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.36.0	0.52.0
Low	GO-2026-4864	stdlib@go1.25.3	1.25.9
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.36.0	0.45.0
Low	GO-2026-4865	stdlib@go1.25.3	1.25.9
Low	GO-2026-4982	stdlib@go1.25.3	1.25.10
Low	GO-2026-5025	golang.org/x/net@v0.38.0	0.55.0
Low	UBUNTU-CVE-2026-78410	util-linux@2.41.3-3ubuntu2.2	no fix listed
Low	UBUNTU-CVE-2026-102633	expat@2.7.4-1ubuntu0.2	no fix listed
Low	GO-2026-6091	stdlib@go1.25.3	1.25.13
Low	UBUNTU-CVE-2026-35368	rust-coreutils@0.10.0-1ubuntu2~26.04.1	no fix listed
Low	GO-2025-4008	stdlib@go1.24.0	1.24.8
Low	GO-2025-4010	stdlib@go1.24.0	1.24.8

Used by

4 charts

Chart	Version	Tag	Containers
argo-cdargoOfficialVerified publisher	10.10.0	v3.5.4	8
argo-cdargo-cd-oci	10.10.0	v3.5.4	8
argo-cdwenerme	10.10.0	v3.5.4	8
argo-cdwener	10.10.0	v3.5.4	8

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.