Product by Go
Github.com/argoproj/argo-cd/v3
8 known vulnerabilities in Github.com/argoproj/argo-cd/v3 (Go), 0 of them actively exploited (CISA KEV).
Key figures
8
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-55797 | Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL | 8.8 | |
| Critical | CVE-2026-77459 | Argoproj Argo-cd: Incorrect Authorization | 9.9 | |
| Critical | CVE-2026-42880 | ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction | 9.6 | |
| High | CVE-2026-45738 | Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation | 8.7 | |
| Medium | CVE-2026-45737 | Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations | 6.5 | |
| Critical | CVE-2025-47933 | Argo CD allows cross-site scripting on repositories page | 9.1 | |
| High | CVE-2026-43824 | Argo CD: Improper Removal of Sensitive Information Before Storage or Transfer | 7.7 | |
| Medium | CVE-2025-55191 | Repository Credentials Race Condition Crashes Argo CD Server | 6.5 |