Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
GO-2026-6784
  • Go/github.com/argoproj/argo-cd
  • Go/github.com/argoproj/argo-cd/v2
  • Go/github.com/argoproj/argo-cd/v3
Argo CD: AppProject destination-namespace and resource restrictions bypassed by... 2 days ago
  • Fix available
GO-2026-6701
  • Go/github.com/argoproj/argo-cd
  • Go/github.com/argoproj/argo-cd/v2
  • Go/github.com/argoproj/argo-cd/v3
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy... 2 days ago
  • Fix available
GHSA-fmxq-cgp8-87wp
  • Go/github.com/argoproj/argo-cd/v2
  • Go/github.com/argoproj/argo-cd/v3
Argo CD: AppProject destination-namespace and resource restrictions bypassed by... 6 days ago
  • Fix available
  • Severity - 9.9 (Critical)
GHSA-j6cw-g6p4-7hch
  • Go/github.com/argoproj/argo-cd/v2
  • Go/github.com/argoproj/argo-cd/v3
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy... 09 Oct
  • Fix available
  • Severity - 8.8 (High)
GO-2026-5618
  • Go/github.com/argoproj/argo-cd
  • Go/github.com/argoproj/argo-cd/v2
  • Go/github.com/argoproj/argo-cd/v3
Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd 25 Jun
  • Fix available
GO-2026-5418
  • Go/github.com/argoproj/argo-cd
  • Go/github.com/argoproj/argo-cd/v2
  • Go/github.com/argoproj/argo-cd/v3
Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd 25 Jun
  • Fix available
GO-2026-5099
  • Go/github.com/argoproj/argo-cd
  • Go/github.com/argoproj/argo-cd/v2
  • Go/github.com/argoproj/argo-cd/v3
ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction in github.com/argoproj/argo-cd 25 Jun
  • Fix available
GHSA-h98r-wv3h-fr38
  • Go/github.com/argoproj/argo-cd
  • Go/github.com/argoproj/argo-cd/v2
  • Go/github.com/argoproj/argo-cd/v3
Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation 19 May
  • Fix available
  • Severity - 7.3 (High)
GO-2025-3993
  • Go/github.com/argoproj/argo-cd
  • Go/github.com/argoproj/argo-cd/v2
  • Go/github.com/argoproj/argo-cd/v3
Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd 23 Oct 2025
  • Fix available
GO-2025-3994
  • Go/github.com/argoproj/argo-cd
  • Go/github.com/argoproj/argo-cd/v2
  • Go/github.com/argoproj/argo-cd/v3
Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd 23 Oct 2025
  • Fix available
GO-2025-3995
  • Go/github.com/argoproj/argo-cd
  • Go/github.com/argoproj/argo-cd/v2
  • Go/github.com/argoproj/argo-cd/v3
Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd 23 Oct 2025
  • Fix available
GO-2025-3996
  • Go/github.com/argoproj/argo-cd
  • Go/github.com/argoproj/argo-cd/v2
  • Go/github.com/argoproj/argo-cd/v3
argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd 23 Oct 2025
  • Fix available
GHSA-gpx4-37g2-c8pv
  • Go/github.com/argoproj/argo-cd/v2
  • Go/github.com/argoproj/argo-cd/v3
Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook 30 Sep 2025
  • Fix available
  • Severity - 7.5 (High)
GHSA-wp4p-9pxh-cgx2
  • Go/github.com/argoproj/argo-cd
  • Go/github.com/argoproj/argo-cd/v2
  • Go/github.com/argoproj/argo-cd/v3
argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload 30 Sep 2025
  • Fix available
  • Severity - 7.5 (High)
GHSA-f9gq-prrc-hrhc
  • Go/github.com/argoproj/argo-cd
  • Go/github.com/argoproj/argo-cd/v2
  • Go/github.com/argoproj/argo-cd/v3
Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload 30 Sep 2025
  • Fix available
  • Severity - 7.5 (High)
GHSA-g88p-r42r-ppp9
  • Go/github.com/argoproj/argo-cd/v2
  • Go/github.com/argoproj/argo-cd/v3
Repository Credentials Race Condition Crashes Argo CD Server 30 Sep 2025
  • Fix available
  • Severity - 6.5 (Medium)