Security
فارسی
All products

github.com/argoproj/argo-cd/v3

Go · Package
11 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooksCVE-2026-77459 · GHSA-FMXQ-CGP8-87WPVersion ranges need review. github.com/argoproj/argo-cd/v2github.com/argoproj/argo-cd/v3 Go Critical Fix reported
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URLCVE-2026-55797 · GHSA-J6CW-G6P4-7HCHVersion ranges need review. github.com/argoproj/argo-cd/v2github.com/argoproj/argo-cd/v3 GoRed Hat High Fix reported
Repository Credentials Race Condition Crashes Argo CD ServerCVE-2025-55191 · GHSA-G88P-R42R-PPP9Version ranges need review. github.com/argoproj/argo-cd/v2github.com/argoproj/argo-cd/v3 GoRed Hat Medium Fix reported
Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalationCVE-2026-45738 · GHSA-H98R-WV3H-FR38Version ranges need review. github.com/argoproj/argo-cd/v2github.com/argoproj/argo-cd/v3 Go High Fix reported
Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotationsCVE-2026-45737 · GHSA-RG3G-4RW9-GQRPVersion ranges need review. github.com/argoproj/argo-cd/v2github.com/argoproj/argo-cd/v3 Go Medium Fix reported
ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret ExtractionCVE-2026-42880 · GHSA-3V3M-WC6V-X4X3 github.com/argoproj/argo-cd/v3Red Hat Openshift Data Foundation 4/odf4/odf-multicluster-rhel9-operator GoRed Hat Critical Fix reported
Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payloadCVE-2025-59531 · GHSA-F9GQ-PRRC-HRHCVersion ranges need review. github.com/argoproj/argo-cd/v2github.com/argoproj/argo-cd/v3 Go High Fix reported
argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payloadCVE-2025-59537 · GHSA-WP4P-9PXH-CGX2Version ranges need review. github.com/argoproj/argo-cd/v2github.com/argoproj/argo-cd/v3 GoRed Hat High Fix reported
Argo CD's Project API Token Exposes Repository CredentialsCVE-2025-55190 · GHSA-786Q-9HCG-V9FFVersion ranges need review. github.com/argoproj/argo-cd/v2github.com/argoproj/argo-cd/v3 GoRed Hat Critical Fix reported
Argo CD allows cross-site scripting on repositories pageCVE-2025-47933 · GHSA-2HJ5-G64G-FP6PVersion ranges need review. github.com/argoproj/argo-cd/v2github.com/argoproj/argo-cd/v3 GoRed Hat Critical Fix reported
Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhookCVE-2025-59538 · GHSA-GPX4-37G2-C8PVVersion ranges need review. github.com/argoproj/argo-cd/v2github.com/argoproj/argo-cd/v3 GoRed Hat High Fix reported