CLEANSTART-2026-BO50567 Security fixes in argo-cd 3.1.12-r0

🗓️ 30 Jul 2026 07:10:53Reported by GoogleType

osv🔗 osv.dev👁 6 Views

Security fixes in argo-cd version 3.1.12-r0 address three vulnerabilities.

Reporter	Title	Published	Views	Family All 296
IBM Security Bulletins	Security Bulletin: Astronomer with IBM is vulnerable to authorization bypass due to the Kubernetes NodeRestriction functionality (CVE-2025-4563)	20 Nov 202514:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by a Kubernetes API server security vulnerability (CVE-2025-5187)	29 Sep 202511:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	10 Nov 202508:26	–	ibm
IBM Security Bulletins	Security Bulletin: Astronomer with IBM is vulnerable to object abuse due to Kubernetes (CVE-2025-5187)	28 Nov 202519:09	–	ibm
IBM Security Bulletins	Security Bulletin: ELM on Hybrid Cloud vulnerabilities addressed in 1.3.0	9 Mar 202613:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses k8s.io/kubernetes v1.33.1 which is vulnerable to CVE-2025-4563 and CVE-2025-5187	3 Feb 202610:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Server Side Request Forgery (SSRF) vulnerability in kubernetes [CVE-2025-13281]	24 Aug 202622:16	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities for EDB Cloudpack for Data CP4D 5.3.1	1 Apr 202606:00	–	ibm
AlpineLinux	CVE-2025-13281	14 Dec 202521:27	–	alpinelinux
BDU FSTEC	The vulnerability of the NodeRestriction plugin in the kube-apiserver server, a software component for managing clusters of virtual machines in Kubernetes, allows a perpetrator to increase their privileges.	8 Sep 202500:00	–	bdu_fstec

Source	Link
github	www.github.com/argoproj/argo-cd

04 Sep 2026 13:30Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.16.7

EPSS0.00663

SSVC

argo cd version three vulnerabilities security fixes argo cd