POC_CVE-2026-42880

CVE-2026-42880 — ArgoCD Secret Exposure via ServerSideDiff A lab environment for reproducing and detecting CVE-2026-42880 , a critical vulnerability in Argo CD where the ServerSideDiff gRPC handler exposes Kubernetes Secret data to read-only users. Vulnerability Overview...

ArgoCD Project API Token Repository Credentials Exposure

Argo CD API tokens with project-level permissions are able to retrieve sensitive repository credentials usernames, passwords through the project details API endpoint, even when the token only has standard application management permissions and no explicit access to secrets. This vulnerability...

CVE-2024-31989

CVE-2024-31989 CVE-Exploit for Argo CD This repository contains an exploit for CVE-2024-31989 that targets a Redis instance without a password in Argo CD. Description Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. This exploit leverages a vulnerability in Argo CD where ...

GHSA-H7VF-4X9W-H99V vulnerabilities

Vulnerabilities for packages: k9s-fips, kyverno-notation-aws, kyverno, kube-arangodb-fips, cluster-api-helm-controller, opentofu, helm-exporter, k9s, tigera-operator-fips, gitness, helm-set-status, opentofu-fips, k8sgpt, maru, kyverno-fips, redpanda-operator, cluster-api-helm-controller-fips,...

GHSA-M37J-52J7-PJW7 vulnerabilities

Vulnerabilities for packages: k9s-fips, kyverno-notation-aws, kyverno, kube-arangodb-fips, cluster-api-helm-controller, opentofu, helm-exporter, k9s, tigera-operator-fips, gitness, helm-set-status, opentofu-fips, k8sgpt, maru, kyverno-fips, redpanda-operator, cluster-api-helm-controller-fips,...

CLEANSTART-2026-AU20661 Security fix for ghsa-mh63-6h87-95cp applied in: argo-cd 2.13.9-r0, argo-cd-fips 2.13.9-r0, argo-events 1.9.7-r1, argo-rollouts 1.9.0-r0, argo-rollouts-fips 1.9.0-r0, boring-registry-fips 0.15.5-r2, chartmuseum-fips 0.14.0-r1, chartmuseum-fips 0.15.0-r4, cortex-fips 0, cosign 2.4.3-r0, cosign 2.5.3-r0, external-dns-fips 0.16.1-r0, falcoctl 0.11.0-r0, harbor-fips 2.10.3-r0, harbor-fips 2.12.4-r1, harbor-fips 2.13.2-r1, harbor-registry 3.0.0.1-r2, kyverno-fips 1.12.7-r0, kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r4, minio-operator 6.0.4-r5, modelmesh-runtime-adapter 0.12.0-r0, modelmesh-runtime-adapter 0.12.0-r1, openbao-fips 2.1.1-r9, opentofu-fips 1.9.4-r0, step-cli 0.27.5-r0, tempo-fips 2.7.2-r0, velero-fips 1.14.1-r1, velero-fips 1.15.2-r0

ghsa-mh63-6h87-95cp affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CVE-2026-85731 vulnerabilities

Vulnerabilities for packages: k9s-fips, kyverno-notation-aws, kyverno, kube-arangodb-fips, cluster-api-helm-controller, opentofu, helm-exporter, k9s, tigera-operator-fips, gitness, helm-set-status, opentofu-fips, k8sgpt, maru, kyverno-fips, redpanda-operator, cluster-api-helm-controller-fips,...

CVE-2026-85732 vulnerabilities

Vulnerabilities for packages: k9s-fips, kyverno-notation-aws, kyverno, kube-arangodb-fips, cluster-api-helm-controller, opentofu, helm-exporter, k9s, tigera-operator-fips, gitness, helm-set-status, opentofu-fips, k8sgpt, maru, kyverno-fips, redpanda-operator, cluster-api-helm-controller-fips,...

CLEANSTART-2026-OO93790 Security fixes in argo-cd 3.4.6-r0

Package argo-cd version 3.4.6-r0 fixes 3 vulnerabilities: ghsa-hrxh-6v49-42gf, ghsa-259r-337f-4rfw, CVE-2026-41178...

CLEANSTART-2026-IQ94380 Security fixes in argo-cd 3.4.7-r1

Package argo-cd version 3.4.7-r1 fixes 5 vulnerabilities: CVE-2026-71556, CVE-2026-71557, ghsa-hrxh-6v49-42gf, CVE-2026-50163, CVE-2026-41178...

CLEANSTART-2026-OO99794 Security fixes in argo-cd-fips 3.4.7-r1

Package argo-cd-fips version 3.4.7-r1 fixes 13 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-56853, CVE-2026-56859...

CLEANSTART-2026-OU97529 Security fixes in argo-cd 3.3.14-r1

Package argo-cd version 3.3.14-r1 fixes 5 vulnerabilities: CVE-2026-71556, CVE-2026-71557, CVE-2026-2303, ghsa-hrxh-6v49-42gf, CVE-2026-50163...

CLEANSTART-2026-LO94255 Security fixes in argo-cd 3.3.14-r3

Package argo-cd version 3.3.14-r3 fixes 2 vulnerabilities: CVE-2026-50163, CVE-2026-41178...

CLEANSTART-2026-II53972 Security fixes in argo-cd 3.4.6-r1

Package argo-cd version 3.4.6-r1 fixes 3 vulnerabilities: CVE-2026-71557, CVE-2026-71556, CVE-2026-50163...

CLEANSTART-2026-VL72619 Security fixes in argo-cd 3.3.13-r0

Package argo-cd version 3.3.13-r0 fixes 3 vulnerabilities: CVE-2026-50163, CVE-2026-71556, CVE-2026-71557...

CLEANSTART-2026-NY04600 Security fixes in argo-cd 3.3.14-r2

Package argo-cd version 3.3.14-r2 fixes 1 vulnerabilities: ghsa-259r-337f-4rfw...

CLEANSTART-2026-LR05303 Security fixes in argo-cd-fips 3.4.7-r3

Package argo-cd-fips version 3.4.7-r3 fixes 10 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-56853, CVE-2026-56859...

CLEANSTART-2026-SU87029 Security fixes in argo-cd 3.3.12-r4

Package argo-cd version 3.3.12-r4 fixes 2 vulnerabilities: ghsa-259r-337f-4rfw, CVE-2026-41178...

CLEANSTART-2026-VT71030 Security fixes in argo-cd-fips 3.4.7-r2

Package argo-cd-fips version 3.4.7-r2 fixes 12 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...

CLEANSTART-2026-WY48690 Security fixes in argo-cd 3.4.7-r2

Package argo-cd version 3.4.7-r2 fixes 1 vulnerabilities: ghsa-259r-337f-4rfw...