argoproj

4 results · Clear filters · Feed

• High 8.8
  CVE-2026-55797 Public exploit

  Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL

  Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.11.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the Argo CD repo-server is vulnerable to command injection when it clones, tests, or fetches an SSH Git repository configured wit…

  argoproj Argo CD argo-cd-3.2-compat argo-cd-3.2 Wolfi Go
  Oct 9, 2026
• Critical 9.6
  CVE-2026-42880 Public exploit

  ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction

  Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From versions 3.2.0 to before 3.2.11 and 3.3.0 to before 3.3.9, there is a missing authorization and data-masking gap in Argo CD's ServerSideDiff endpoint that allows an attacker with r…

  argoproj Argo CD argocd-image-updater github.com/argoproj/argo-cd Wolfi Go
  May 7, 2026
• Critical 9.1
  CVE-2024-31989 Public exploit

  ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache

  Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. It has been discovered that an unprivileged pod in a different namespace on the same cluster could connect to the Redis server on port 6379. Despite having installed the latest version …

  argoproj Argo CD github.com/argoproj/argo-cd github.com/argoproj/argo-cd/v2 Go
  May 21, 2024
• Critical 9.9
  CVE-2023-40029 Public exploit

  Cluster secret might leak in cluster details page in Argo CD

  Argo CD is a declarative continuous deployment for Kubernetes. Argo CD Cluster secrets might be managed declaratively using Argo CD / kubectl apply. As a result, the full secret body is stored in`kubectl.kubernetes.io/last-applied-configuration` annotation. p…

  argoproj Argo CD github.com/argoproj/argo-cd github.com/argoproj/argo-cd/v2 Go
  Sep 7, 2023