CLEANSTART-2026-AO83175 Security fixes in argo-cd-fips 3.0.22-r0

Package argo-cd-fips version 3.0.22-r0 fixes 2 vulnerabilities: ghsa-r6j8-c6r2-37rr, ghsa-2x5j-vhc8-9cwm...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: grype, gitaly, argo-events, rancher-fleet, external-secrets-operator, wolfictl, gomplate, gitsign, dagger, steampipe, k9s, terragrunt, pulumi-language-yaml, pulumi-kubernetes-operator, kots, argo-cd, gitea, skaffold, flux-image-automation-controller, kyverno,...

GO-2025-3995 Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd...

PT-2025-36652

Argo CD's Project API Token Exposes Repository Credentials in github.com/argoproj/argo-cd...

CVE-2022-29165

creationtimestamp| type| source ---|---|--- 2022-05-20 18:31:32+00:00| seen| https://t.me/cibsecurity/43061 2024-04-04 16:48:44+00:00| published-proof-of-concept| https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/argocdexposedui...