Skip to content
OpenAdvisories
Critical RHSA-2025:8269 1 CVE

Red Hat Security Advisory: Red Hat OpenShift GitOps 1.16.1 security release

Published May 29, 2025 · Updated Apr 30, 2026

Ecosystem: Red Hat

Fixed packages 6

ReleasePackageFixed in
Red Hat · Openshift Gitops 1 openshift_gitops:1.16::el8 openshift-gitops-argocd-cli 0:1.16.1-26.el8
Red Hat · Openshift Gitops 1 openshift_gitops:1.16::el8 openshift-gitops-argocd-cli-redistributable 0:1.16.1-26.el8
Red Hat · Openshift Gitops 1 openshift_gitops:1.16::el9 microshift-gitops 0:1.16.1-10.el9
Red Hat · Openshift Gitops 1 openshift_gitops:1.16::el9 microshift-gitops-release-info 0:1.16.1-10.el9
Red Hat · Openshift Gitops 1 openshift_gitops:1.16::el9 openshift-gitops-argocd-cli 0:1.16.1-10.el9
Red Hat · Openshift Gitops 1 openshift_gitops:1.16::el9 openshift-gitops-argocd-cli-redistributable 0:1.16.1-10.el9

Vulnerabilities 1

  • Critical 9.1
    CVE-2025-47933

    Argo CD allows cross-site scripting on repositories page

    Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Prior to versions 2.13.8, 2.14.13, and 3.0.4, an attacker can perform arbitrary actions on behalf of the victim via the API. Due to the improper filtering of URL protocols in the reposi…

    argoproj Argo CD argocd-image-updater github.com/argoproj/argo-cd Wolfi Go

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://issues.redhat.com/browse/GITOPS-6885
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8269.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-47933
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2367740
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-47933
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-47933
  • article
    https://github.com/argoproj/argo-cd/security/advisories/GHSA-2hj5-g64g-fp6p