AR
Vendor
argoproj
84
CVEs
0
On KEV
5
New 30D
Products
AR10.0
argo-cd
argoproj
63 CVEs0 on KEV5 new
AR9.9
argo-workflows
argoproj
18 CVEs0 on KEV0 new
AR8.9
argo-helm
argoproj
2 CVEs0 on KEV0 new
AR9.8
argo-rollouts
argoproj
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-113709 | AR argo-cd argoproj | 9.9 | Oct 20 | Argo CD: A Kustomize Helm config home can run commands in the repo-server |
| CVE-2026-113708 | AR argo-cd argoproj | 9.9 | Oct 20 | Argo CD: A Kustomize remote ref can run commands in the repo-server |
| CVE-2026-113672 | AR argo-cd argoproj | 9.9 | Oct 20 | Argo CD: A Jsonnet import can read files from the repo-server |
| CVE-2026-77459 | AR argo-cd argoproj | 9.9 | Oct 13 | Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks |
| CVE-2026-55797 | AR argo-cd argoproj | 8.8 | Oct 9 | Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL |
| CVE-2026-93991 | AR argo-workflows argoproj | 7.7 | Sep 19 | Argo Workflows 4.1.0 through 4.1.3 Cross-Namespace Disclosure via Negated Selector |
| CVE-2026-82277 | AR argo-rollouts argoproj | 9.8 | Aug 28 | Argo Rollouts Dashboard Unauthenticated Mutating Operations |
| CVE-2026-54526 | AR argo-workflows argoproj | 9.9 | Jul 16 | Argo Workflows: Incomplete fix for CVE-2026-31892: ArtifactGC.PodSpecPatch bypass of Strict/Secure templateReferencing |
| CVE-2026-45737 | AR argo-cd argoproj | 6.5 | Jul 15 | Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations |
| CVE-2026-45738 | AR argo-cd argoproj | 8.7 | Jul 15 | Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation |
| CVE-2026-15416 | AR argo-helm argoproj | 8.9 | Jul 14 | Argo-cd: argo cd unauthenticated remote code execution in repo-server via generatemanifest grpc endpoint |
| CVE-2026-62185 | AR argo-helm argoproj | 7.6 | Jul 13 | Argo CD Helm Chart < 10.0.0 Missing Network Policy RCE |
| CVE-2026-42296 | AR argo-workflows argoproj | 8.1 | May 9 | Argo Workflows has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure |
| CVE-2026-42295 | AR argo-workflows argoproj | 4.9 | May 9 | Argo Workflows: Exposure of artifact repository credentials |
| CVE-2026-42294 | AR argo-workflows argoproj | 7.5 | May 9 | Argo Workflows: Unauthenticated Memory Exhaustion (DoS) in Webhook Interceptor |
| CVE-2026-42183 | AR argo-workflows argoproj | 6.5 | May 9 | Argo Workflows: SSO RBAC Delegation Nil Pointer Dereference DoS (gatekeeper.go) |
| CVE-2026-42297 | AR argo-workflows argoproj | 8.3 | May 9 | Argo Workflows Is Missing Authorization in Sync ConfigMap Provider |
| CVE-2026-42880 | AR argo-cd argoproj | 9.6 | May 7 | ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction |
| CVE-2026-43824 | AC Argo CD argoproj | 7.7 | May 2 | In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data |
| CVE-2026-40886 | AR argo-workflows argoproj | 7.7 | Apr 23 | Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows controller |
| CVE-2026-31892 | AR argo-workflows argoproj | 8.1 | Mar 11 | WorkflowTemplate Security Bypass via podSpecPatch in Strict/Secure Reference Mode |
| CVE-2026-28229 | AR argo-workflows argoproj | 7.5 | Mar 11 | Argo Workflows has unauthorized access to Argo Workflows Template |
| CVE-2026-23960 | AR argo-workflows argoproj | 5.4 | Jan 21 | Argo Workflows affected by stored XSS in the artifact directory listing |
| CVE-2025-66626 | AR argo-workflows argoproj | 7.5 | Dec 9 | argoproj/argo-workflows is vulnerable to RCE via ZipSlip and symbolic links |
| CVE-2025-62157 | AR argo-workflows argoproj | 6.5 | Oct 14 | Argo Workflows exposes artifact repository credentials in workflow-controller logs |
| CVE-2025-62156 | AR argo-workflows argoproj | 8.8 | Oct 14 | argo-workflows Zip Slip path traversal allows arbitrary file write and container configuration overwrite |
| CVE-2025-59538 | AR argo-cd argoproj | 7.5 | Oct 1 | Argo CD is Vulnerable to Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook |
| CVE-2025-59537 | AR argo-cd argoproj | 7.5 | Oct 1 | argo-cd is vulnerable to unauthenticated DoS attack via malformed Gogs webhook payload |
| CVE-2025-59531 | AR argo-cd argoproj | 7.5 | Oct 1 | Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload |
| CVE-2025-55191 | AR argo-cd argoproj | 5.3 | Sep 30 | Repository Credentials Race Condition Crashes Argo CD Server |
| CVE-2025-55190 | AR argo-cd argoproj | 9.9 | Sep 4 | Argo CD: Project API Token Exposes Repository Credentials |
| CVE-2025-47933 | AC Argo CD Argoproj | 5.4 | May 29 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes |
| CVE-2025-23216 | AC Argo CD Argoproj | 6.8 | Jan 30 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes |
| CVE-2024-53862 | AW Argo Workflows Argoproj | 7.5 | Dec 2 | Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes |
| CVE-2024-47827 | AW Argo Workflows Argoproj | 4.8 | Oct 28 | Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes |
| CVE-2024-41666 | AC Argo CD Argoproj | 6.5 | Jul 24 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes |
| CVE-2024-40634 | AC Argo CD Argoproj | 7.5 | Jul 22 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes |
| CVE-2024-37152 | AC Argo CD Argoproj | 7.5 | Jun 6 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes |
| CVE-2024-36106 | AC Argo CD Argoproj | 4.3 | Jun 6 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes |
| CVE-2024-31989 | AC Argo CD Argoproj | 9.0 | May 21 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes |
| CVE-2024-32476 | AC Argo CD Argoproj | 6.5 | May 14 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes |
| CVE-2024-31990 | AC Argo CD Argoproj | 6.3 | Apr 15 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes |
| CVE-2024-29893 | AC Argo CD Argoproj | 6.5 | Mar 29 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes |
| CVE-2024-21662 | AC Argo CD Argoproj | 9.1 | Mar 18 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes |
| CVE-2024-21661 | AC Argo CD Argoproj | 7.5 | Mar 18 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes |
| CVE-2024-21652 | AC Argo CD Argoproj | 9.8 | Mar 18 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes |
| CVE-2024-28175 | AC Argo CD Argoproj | 5.4 | Mar 13 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes |
| CVE-2023-50726 | AC Argo CD Argoproj | 6.4 | Mar 13 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes |
| CVE-2024-22424 | AC Argo CD Argoproj | 8.3 | Jan 19 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes |
| CVE-2023-40026 | AC Argo CD Argoproj | 4.3 | Sep 27 | Argo CD is a declarative continuous deployment framework for Kubernetes |
| CVE-2023-40584 | AC Argo CD Argoproj | 6.5 | Sep 7 | Argo CD is a declarative continuous deployment for Kubernetes |
| CVE-2023-40029 | AC Argo CD Argoproj | 9.6 | Sep 7 | Argo CD is a declarative continuous deployment for Kubernetes |
| CVE-2023-40025 | AC Argo CD Argoproj | 7.1 | Aug 23 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes |
| CVE-2023-23947 | AC Argo CD Argoproj | 8.5 | Feb 16 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes |
| CVE-2023-25163 | AC Argo CD Argoproj | 6.5 | Feb 8 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes |
| CVE-2023-22736 | AC Argo CD Argoproj | 8.5 | Jan 26 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes |
| CVE-2023-22482 | AC Argo CD Argoproj | 8.8 | Jan 26 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes |
| CVE-2022-31105 | AC Argo CD Argoproj | 9.6 | Jul 12 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes |
| CVE-2022-31102 | AC Argo CD Argoproj | 6.1 | Jul 12 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes |
| CVE-2022-1025 | AC Argo CD Argoproj | 8.8 | Jul 12 | All unpatched versions of Argo CD starting with v1.0.0 are vulnerable to an improper access control bug, allowing a malicious user to potentially escalate their privileges to… |
