CLEANSTART-2026-AO83175 Security fixes in argo-cd-fips 3.0.22-r0

Package argo-cd-fips version 3.0.22-r0 fixes 2 vulnerabilities: ghsa-r6j8-c6r2-37rr, ghsa-2x5j-vhc8-9cwm...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: pulumi-language-java, dagger, goreleaser, gitlab-runner, pulumi-language-dotnet, snyk-cli, apko, external-secrets-operator, pulumi-kubernetes-operator, syft, kubevela, kubescape, gptscript, nfpm, argo-cd, gomplate, guac, terragrunt, act, crossplane, rancher-fleet,...

GO-2025-3995 Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd...

PT-2025-36652

Argo CD's Project API Token Exposes Repository Credentials in github.com/argoproj/argo-cd...

CVE-2022-29165

creationtimestamp| type| source ---|---|--- 2022-05-20 18:31:32+00:00| seen| https://t.me/cibsecurity/43061 2024-04-04 16:48:44+00:00| published-proof-of-concept| https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/argocdexposedui...