CLEANSTART-2026-AO83175 Security fixes in argo-cd-fips 3.0.22-r0

Package argo-cd-fips version 3.0.22-r0 fixes 2 vulnerabilities: ghsa-r6j8-c6r2-37rr, ghsa-2x5j-vhc8-9cwm...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: flux-source-controller, kots, osv-scanner, kargo, witness, trufflehog, cerbos, grafana-alloy, k9s, bom, dagger, goreleaser, gitlab-runner, argocd-image-updater, kyverno, argo-events, crossplane, skaffold, grype, wolfictl, scorecard, steampipe, kubescape, kubevela,...

GO-2025-3995 Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd...

PT-2025-36652

Argo CD's Project API Token Exposes Repository Credentials in github.com/argoproj/argo-cd...

CVE-2022-29165

creationtimestamp| type| source ---|---|--- 2022-05-20 18:31:32+00:00| seen| https://t.me/cibsecurity/43061 2024-04-04 16:48:44+00:00| published-proof-of-concept| https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/argocdexposedui...