Skip to content
OpenAdvisories

Vendor

argoproj

76 known vulnerabilities.

Products

Argo CD 50 argo-workflows 17 argo-helm 4 argocd-mcp 2 argo-events 2 argo-rollouts 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 2.3
    CVE-2026-42183

    Argo Workflows: SSO RBAC Delegation Nil Pointer Dereference DoS (gatekeeper.go)

    Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. From version 4.0.0 to before version 4.0.5, a nil pointer dereference in server/auth/gatekeeper.go rbacAuthorization() causes a panic (denial of s…

    argoproj argo-workflows kubeflow-pipelines-apiserver kubeflow-pipelines-persistence_agent Wolfi Go
  • Low 2.8
    CVE-2024-52814

    Helm Lacks Granularity in Workflow Role

    Argo Helm is a collection of community maintained charts for `argoproj.github.io` projects. Prior to version 0.45.0, the `workflow-role`) lacks granularity in its privileges, giving permissions to `workflowtasksets` and `workflowartifactgctasks` to all workfl…

    argoproj argo-helm
  • Low 2.6
    CVE-2022-31102

    Cross-site Scripting for Argo CD single sign on users

    Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD starting with 2.3.0 and prior to 2.3.6 and 2.4.5 is vulnerable to a cross-site scripting (XSS) bug which could allow an attacker to inject arbitrary JavaScript in the `/auth/cal…

    argoproj Argo CD github.com/argoproj/argo-cd github.com/argoproj/argo-cd/v2 Go