[ Vendor · 5 CVEs ]
argoproj
CVEs affecting argoproj published in the last 30 days, plus any argoproj CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-113708 | 20 Oct 2026 | CVSS 9.9 | argoproj argo-cdArgo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.7.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Kustomize passes ref… | |
| CVE-2026-113709 | 20 Oct 2026 | CVSS 9.9 | argoproj argo-cdArgo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.1.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, when an operator has… | |
| CVE-2026-113672 | 20 Oct 2026 | CVSS 9.9 | argoproj argo-cdArgo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 0.9.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the repo-server… | |
| CVE-2026-77459 | 13 Oct 2026 | CVSS 9.9 | Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooksArgo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Argo CD creates… | Fix |
| CVE-2026-55797 | 9 Oct 2026 | CVSS 8.8 | Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URLArgo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.11.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the Argo CD… | Fix |