quay.io/argoproj/argocd:v3.5.4 container image

Quay.io

Scanned 8 Oct 2026

Deployed by 4 of 18,053 indexed charts (latest versions) at this tag.Quay.io all tags of quay.io/argoproj/argocd

quay.io/argoproj/argocd:v3.5.4 resolved to 49dff79439bb, scanned 8 Oct 2026: 171 findings, 0 critical; deployed by 4 charts, among them argo-cd, argo-cd and argo-cd.

Radar Score

1,6660018153

171 findings on digest 49dff79439bb · scanned 8 Oct 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
v3.5.4resolves to	49dff79439bb	4 charts	today	0018153	1,666

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

171 distinct on this digest

Findings for digest 49dff79439bb as scanned on 8 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 8 Oct 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-35354	rust-coreutils@0.10.0-1ubuntu2~26.04.1	no fix listed
Low	GO-2025-3547	k8s.io/kubernetes@v1.36.1	no fix listed
Low	UBUNTU-CVE-2026-102474	dash@0.5.12-12ubuntu3	no fix listed
Low	UBUNTU-CVE-2026-89156	pcre2@10.46-1build1	no fix listed
Low	UBUNTU-CVE-2026-18477	tar@1.35+dfsg-4ubuntu0.4	no fix listed
Low	GO-2026-5932	golang.org/x/crypto@v0.36.0	no fix listed
Low	UBUNTU-CVE-2026-95818	glibc@2.43-2ubuntu2.4	no fix listed
Low	GO-2026-5024	golang.org/x/sys@v0.31.0	0.44.0
Low	UBUNTU-CVE-2025-66382	expat@2.7.4-1ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-35371	rust-coreutils@0.10.0-1ubuntu2~26.04.1	no fix listed
Low	UBUNTU-CVE-2026-35373	rust-coreutils@0.10.0-1ubuntu2~26.04.1	no fix listed
Low	UBUNTU-CVE-2026-35344	rust-coreutils@0.10.0-1ubuntu2~26.04.1	no fix listed
Low	UBUNTU-CVE-2026-35367	rust-coreutils@0.10.0-1ubuntu2~26.04.1	no fix listed
Low	UBUNTU-CVE-2026-35377	rust-coreutils@0.10.0-1ubuntu2~26.04.1	no fix listed
Low	UBUNTU-CVE-2026-89162	pcre2@10.46-1build1	no fix listed
Low	UBUNTU-CVE-2026-40228	systemd@259.5-0ubuntu3.4	no fix listed
Low	GO-2026-4602	stdlib@go1.25.3	1.25.8
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0	1.45.0
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0	1.45.0
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0
Low	UBUNTU-CVE-2026-105712	gnupg2@2.4.8-4ubuntu3.1	no fix listed

Used by

4 charts

Chart	Version	Tag	Containers
argo-cdargoOfficialVerified publisher	10.10.0	v3.5.4	8
argo-cdargo-cd-oci	10.10.0	v3.5.4	8
argo-cdwenerme	10.10.0	v3.5.4	8
argo-cdwener	10.10.0	v3.5.4	8

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.