AR
Vendor
argoproj
4 products with CVEs on record
84
CVEs
0
On KEV
5
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-113709
AR
argo-cd
argoproj
9.9
1%
Oct 20Argo CD: A Kustomize Helm config home can run commands in the repo-server
CVE-2026-113708
AR
argo-cd
argoproj
9.9
1%
Oct 20Argo CD: A Kustomize remote ref can run commands in the repo-server
CVE-2026-113672
AR
argo-cd
argoproj
9.9
1%
Oct 20Argo CD: A Jsonnet import can read files from the repo-server
CVE-2026-77459
AR
argo-cd
argoproj
9.9
0%
Oct 13Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks
CVE-2026-55797
AR
argo-cd
argoproj
8.8
2%
Oct 9Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL
CVE-2026-93991
AR
argo-workflows
argoproj
7.7
0%
Sep 19Argo Workflows 4.1.0 through 4.1.3 Cross-Namespace Disclosure via Negated Selector
CVE-2026-82277
AR
argo-rollouts
argoproj
9.8
1%
Aug 28Argo Rollouts Dashboard Unauthenticated Mutating Operations
CVE-2026-54526
AR
argo-workflows
argoproj
9.9
1%
Jul 16Argo Workflows: Incomplete fix for CVE-2026-31892: ArtifactGC.PodSpecPatch bypass of Strict/Secure templateReferencing
CVE-2026-45737
AR
argo-cd
argoproj
6.5
1%
Jul 15Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations
CVE-2026-45738
AR
argo-cd
argoproj
8.7
1%
Jul 15Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation
CVE-2026-15416
AR
argo-helm
argoproj
8.9
0%
Jul 14Argo-cd: argo cd unauthenticated remote code execution in repo-server via generatemanifest grpc endpoint
CVE-2026-62185
AR
argo-helm
argoproj
7.6
0%
Jul 13Argo CD Helm Chart < 10.0.0 Missing Network Policy RCE
CVE-2026-42296
AR
argo-workflows
argoproj
8.1
0%
May 9Argo Workflows has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure
CVE-2026-42295
AR
argo-workflows
argoproj
4.9
0%
May 9Argo Workflows: Exposure of artifact repository credentials
CVE-2026-42294
AR
argo-workflows
argoproj
7.5
1%
May 9Argo Workflows: Unauthenticated Memory Exhaustion (DoS) in Webhook Interceptor
CVE-2026-42183
AR
argo-workflows
argoproj
6.5
0%
May 9Argo Workflows: SSO RBAC Delegation Nil Pointer Dereference DoS (gatekeeper.go)
CVE-2026-42297
AR
argo-workflows
argoproj
8.3
1%
May 9Argo Workflows Is Missing Authorization in Sync ConfigMap Provider
CVE-2026-42880
AR
argo-cd
argoproj
9.6
1%
May 7ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction
CVE-2026-43824
AC
Argo CD
argoproj
7.7
0%
May 2In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data
CVE-2026-40886
AR
argo-workflows
argoproj
7.7
0%
Apr 23Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows controller
CVE-2026-31892
AR
argo-workflows
argoproj
8.1
1%
Mar 11WorkflowTemplate Security Bypass via podSpecPatch in Strict/Secure Reference Mode
CVE-2026-28229
AR
argo-workflows
argoproj
7.5
1%
Mar 11Argo Workflows has unauthorized access to Argo Workflows Template
CVE-2026-23960
AR
argo-workflows
argoproj
5.4
0%
Jan 21Argo Workflows affected by stored XSS in the artifact directory listing
CVE-2025-66626
AR
argo-workflows
argoproj
7.5
1%
Dec 9argoproj/argo-workflows is vulnerable to RCE via ZipSlip and symbolic links
CVE-2025-62157
AR
argo-workflows
argoproj
6.5
0%
Oct 14Argo Workflows exposes artifact repository credentials in workflow-controller logs
CVE-2025-62156
AR
argo-workflows
argoproj
8.8
1%
Oct 14argo-workflows Zip Slip path traversal allows arbitrary file write and container configuration overwrite
CVE-2025-59538
AR
argo-cd
argoproj
7.5
9%
Oct 1Argo CD is Vulnerable to Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook
CVE-2025-59537
AR
argo-cd
argoproj
7.5
1%
Oct 1argo-cd is vulnerable to unauthenticated DoS attack via malformed Gogs webhook payload
CVE-2025-59531
AR
argo-cd
argoproj
7.5
1%
Oct 1Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload
CVE-2025-55191
AR
argo-cd
argoproj
5.3
0%
Sep 30Repository Credentials Race Condition Crashes Argo CD Server
CVE-2025-55190
AR
argo-cd
argoproj
9.9
6%
Sep 4Argo CD: Project API Token Exposes Repository Credentials
CVE-2025-47933
AC
Argo CD
Argoproj
5.4
0%
May 29Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes
CVE-2025-23216
AC
Argo CD
Argoproj
6.8
0%
Jan 30Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes
CVE-2024-53862
AW
Argo Workflows
Argoproj
7.5
1%
Dec 2Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes
CVE-2024-47827
AW
Argo Workflows
Argoproj
4.8
0%
Oct 28Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes
CVE-2024-41666
AC
Argo CD
Argoproj
6.5
1%
Jul 24Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes
CVE-2024-40634
AC
Argo CD
Argoproj
7.5
1%
Jul 22Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes
CVE-2024-37152
AC
Argo CD
Argoproj
7.5
2%
Jun 6Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes
CVE-2024-36106
AC
Argo CD
Argoproj
4.3
0%
Jun 6Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes
CVE-2024-31989
AC
Argo CD
Argoproj
9.0
1%
May 21Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes
CVE-2024-32476
AC
Argo CD
Argoproj
6.5
1%
May 14Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes
CVE-2024-31990
AC
Argo CD
Argoproj
6.3
0%
Apr 15Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes
CVE-2024-29893
AC
Argo CD
Argoproj
6.5
1%
Mar 29Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes
CVE-2024-21662
AC
Argo CD
Argoproj
9.1
1%
Mar 18Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes
CVE-2024-21661
AC
Argo CD
Argoproj
7.5
1%
Mar 18Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes
CVE-2024-21652
AC
Argo CD
Argoproj
9.8
1%
Mar 18Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes
CVE-2024-28175
AC
Argo CD
Argoproj
5.4
1%
Mar 13Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes
CVE-2023-50726
AC
Argo CD
Argoproj
6.4
1%
Mar 13Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes
CVE-2024-22424
AC
Argo CD
Argoproj
8.3
0%
Jan 19Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes
CVE-2023-40026
AC
Argo CD
Argoproj
4.3
1%
Sep 27Argo CD is a declarative continuous deployment framework for Kubernetes
CVE-2023-40584
AC
Argo CD
Argoproj
6.5
1%
Sep 7Argo CD is a declarative continuous deployment for Kubernetes
CVE-2023-40029
AC
Argo CD
Argoproj
9.6
1%
Sep 7Argo CD is a declarative continuous deployment for Kubernetes
CVE-2023-40025
AC
Argo CD
Argoproj
7.1
1%
Aug 23Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes
CVE-2023-23947
AC
Argo CD
Argoproj
8.5
1%
Feb 16Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes
CVE-2023-25163
AC
Argo CD
Argoproj
6.5
1%
Feb 8Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes
CVE-2023-22736
AC
Argo CD
Argoproj
8.5
1%
Jan 26Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes
CVE-2023-22482
AC
Argo CD
Argoproj
8.8
1%
Jan 26Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes
CVE-2022-31105
AC
Argo CD
Argoproj
9.6
1%
Jul 12Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes
CVE-2022-31102
AC
Argo CD
Argoproj
6.1
1%
Jul 12Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes
CVE-2022-1025
AC
Argo CD
Argoproj
8.8
1%
Jul 12All unpatched versions of Argo CD starting with v1.0.0 are vulnerable to an improper access control bug, allowing a malicious user to potentially escalate their privileges to…