1056 matches found
CVE-2026-82456
argocd-mcp version 0.8.0 (argoproj-labs) has an authentication bypass via its unauthenticated HTTP transport. The server binds to all network interfaces and accepts MCP sessions without requiring caller credentials when the ARGOCD_API_TOKEN environment variable is configured. Any network-reachabl...
BIT-ARGO-CD-2025-55191 Repository Credentials Race Condition Crashes Argo CD Server
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions between 2.1.0 and 2.14.19, 3.2.0, 3.1.0 through 3.1.7, and 3.0.0 through 3.0.18 contain a race condition in the repository credentials handler that can cause the Argo CD server to panic and crash when concurrent...
GO-2025-3521 vulnerabilities
Vulnerabilities for packages: kubernetes, harvester, longhorn-share-manager, vcluster, azure-container-networking, longhorn-manager-fips, argo-cd-fips, spark-operator-fips, longhorn-share-manager-fips, longhorn-manager, harvester-fips, rke2-runtime-fips...
GO-2025-3547 vulnerabilities
Vulnerabilities for packages: rancher-system-agent, longhorn-share-manager-fips, cluster-autoscaler-fips, harvester, longhorn-share-manager, longhorn-manager-fips, argo-cd-fips, azuredisk-csi, harvester-fips, kubernetes-csi-driver-hostpath, eks-distro, azurefile-csi-fips, longhorn-manager,...
GO-2026-5882 vulnerabilities
Vulnerabilities for packages: helm-set-status, maru, k9s, gitlab-operator, rancher, k8ssandra-client, vcluster, conftest, steampipe, headlamp-fips, zarf, chartmuseum, xeol-fips, vcluster-fips, cloudbeat-fips, trivy, helm-operator, falcoctl-fips, gitness, falcoctl, ocm-kubernetes-controller-fips,...
GO-2026-5418 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, argo-cd, argocd-image-updater-fips...
GO-2026-5618 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, argo-cd, argocd-image-updater-fips...
GO-2026-5693 vulnerabilities
Vulnerabilities for packages: grafana, argo-cd, gitaly, gitlab-rails-ce, flux, nemo, grafana-fips, upwind-agent, argo-cd-fips, external-secrets-operator, terragrunt, terragrunt-fips, flux-fips, guac, teleport, gitlab-rails-ce-fips, external-secrets-operator-fips...
GO-2026-5885 vulnerabilities
Vulnerabilities for packages: helm-set-status, maru, k9s, gitlab-operator, rancher, k8ssandra-client, vcluster, conftest, steampipe, headlamp-fips, zarf, chartmuseum, xeol-fips, vcluster-fips, cloudbeat-fips, trivy, harvester, helm-operator, falcoctl-fips, gitness, falcoctl,...
GO-2025-3540 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector-fips, authservice, dapr-fips, opentelemetry-collector-contrib-fips, gitea, juicefs, rekor-fips, loki-fips, oauth2-proxy, keda, argo-cd-fips, loki, traefik-fips, argo-cd, falcosidekick, dapr, atlantis, splunk-otel-collector, kots,...
GO-2025-3994 vulnerabilities
Vulnerabilities for packages: argo-cd...
GO-2025-3995 vulnerabilities
Vulnerabilities for packages: argo-cd...
GO-2024-3002 vulnerabilities
Vulnerabilities for packages: argo-cd...
GO-2026-5410 vulnerabilities
Vulnerabilities for packages: kubewatch, ory-kratos, argo-events, argo-rollouts, argo-events-fips, argo-cd-fips, peerdb-flow, kubernetes-event-exporter-fips, goreleaser, bento, bento-fips, kyverno-policy-reporter-fips, argo-rollouts-fips, kubernetes-event-exporter, argo-cd, atlantis,...
GO-2025-3720 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, argo-cd, argocd-image-updater-fips...
GO-2025-3934 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, argo-cd, argocd-image-updater-fips...
GO-2025-3996 vulnerabilities
Vulnerabilities for packages: argo-cd...
GO-2024-2883 vulnerabilities
Vulnerabilities for packages: fulcio, argo-cd, rekor-fips, timestamp-authority, rekor, grafana-mimir, prometheus-alertmanager-fips, cortex, timestamp-authority-fips, fulcio-fips, prometheus-alertmanager, cortex-fips...