Skip to content
OpenAdvisories

Package · Go

github.com/argoproj/argo-cd/v3

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.9
    CVE-2026-77459

    Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks

    Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Argo CD creates PostDelete resource hooks without applying the AppProject destination and resource authorization checks used duri…

    argoproj Argo CD argo-cd-3.2-compat argo-cd-3.2 Wolfi Go
  • Critical 9.6
    CVE-2026-42880 Public exploit

    ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction

    Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From versions 3.2.0 to before 3.2.11 and 3.3.0 to before 3.3.9, there is a missing authorization and data-masking gap in Argo CD's ServerSideDiff endpoint that allows an attacker with r…

    argoproj Argo CD argocd-image-updater github.com/argoproj/argo-cd Wolfi Go
  • Critical 10.0
    CVE-2025-55190 Scanner template

    Argo CD: Project API Token Exposes Repository Credentials

    Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. In versions 2.13.0 through 2.13.8, 2.14.0 through 2.14.15, 3.0.0 through 3.0.12 and 3.1.0-rc1 through 3.1.1, API tokens with project-level permissions are able to retrieve sensitive rep…

    argoproj Argo CD argocd-image-updater github.com/argoproj/argo-cd Wolfi Go
  • Critical 9.1
    CVE-2025-47933

    Argo CD allows cross-site scripting on repositories page

    Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Prior to versions 2.13.8, 2.14.13, and 3.0.4, an attacker can perform arbitrary actions on behalf of the victim via the API. Due to the improper filtering of URL protocols in the reposi…

    argoproj Argo CD argocd-image-updater github.com/argoproj/argo-cd Wolfi Go