github.com/argoproj/argo-cd/v2 vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-45738Highgithub.com/argoproj/argo-cd/v3: Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation CVE-2025-59538Highgithub.com/argoproj/argo-cd/v2: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook CVE-2025-59537Highgithub.com/argoproj/argo-cd: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload CVE-2025-59531Highgithub.com/argoproj/argo-cd: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload CVE-2025-55191Mediumgithub.com/argoproj/argo-cd/v2: Repository Credentials Race Condition Crashes Argo CD Server CVE-2025-55190Criticalgithub.com/argoproj/argo-cd/v2: Argo CD's Project API Token Exposes Repository Credentials CVE-2025-47933Criticalgithub.com/argoproj/argo-cd: Argo CD allows cross-site scripting on repositories page CVE-2025-23216Mediumgithub.com/argoproj/argo-cd/v2: Argo CD does not scrub secret values from patch errors CVE-2024-41666Mediumgithub.com/argoproj/argo-cd/v2: The Argo CD web terminal session does not handle the revocation of user permissions properly CVE-2024-40634Highgithub.com/argoproj/argo-cd: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint CVE-2024-31989Criticalgithub.com/argoproj/argo-cd/v2: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache CVE-2024-32476Mediumgithub.com/argoproj/argo-cd/v2: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences CVE-2024-31990Mediumgithub.com/argoproj/argo-cd/v2: Argo CD's API server does not enforce project sourceNamespaces CVE-2024-29893Mediumgithub.com/argoproj/argo-cd/v2: ArgoCD's repo server has Uncontrolled Resource Consumption vulnerability CVE-2024-21662Mediumgithub.com/argoproj/argo-cd/v2: Bypassing Rate Limit and Brute Force Protection Using Cache Overflow CVE-2024-21661Highgithub.com/argoproj/argo-cd: Denial of Service (DoS) Vulnerability Due to Unsafe Array Modification in Multi-threaded Environment CVE-2024-21652Criticalgithub.com/argoproj/argo-cd/v2: Bypassing Brute Force Protection via Application Crash and In-Memory Data Loss CVE-2024-28175Criticalgithub.com/argoproj/argo-cd/v2: Cross-site scripting on application summary component CVE-2023-50726Mediumgithub.com/argoproj/argo-cd: Users with `create` but not `override` privileges can perform local sync CVE-2024-22424Highgithub.com/argoproj/argo-cd: github.com/argoproj/argo-cd Cross-Site Request Forgery vulnerability CVE-2023-40026Mediumgithub.com/argoproj/argo-cd: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server CVE-2023-40584Mediumgithub.com/argoproj/argo-cd/v2: Argo CD repo-server Denial of Service vulnerability CVE-2023-40029Criticalgithub.com/argoproj/argo-cd/v2: Argo CD cluster secret might leak in cluster details page CVE-2023-40025Highgithub.com/argoproj/argo-cd/v2: Argo CD web terminal session doesn't expire CVE-2022-41354Mediumgithub.com/argoproj/argo-cd: Argo CD authenticated but unauthorized users may enumerate Application names via the API

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo