1429 matches found
ArgoCD Project API Token Repository Credentials Exposure
Argo CD API tokens with project-level permissions are able to retrieve sensitive repository credentials usernames, passwords through the project details API endpoint, even when the token only has standard application management permissions and no explicit access to secrets. This vulnerability...
POC_CVE-2026-42880
CVE-2026-42880 — ArgoCD Secret Exposure via ServerSideDiff A lab environment for reproducing and detecting CVE-2026-42880 , a critical vulnerability in Argo CD where the ServerSideDiff gRPC handler exposes Kubernetes Secret data to read-only users. Vulnerability Overview Field| Details ---|--- CV...
CVE-2024-31989
CVE-2024-31989 CVE-Exploit for Argo CD This repository contains an exploit for CVE-2024-31989 that targets a Redis instance without a password in Argo CD. Description Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. This exploit leverages a vulnerability in Argo CD where ...
CLEANSTART-2026-LK67245 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes
CVE-2025-59537 affects multiple packages. Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. See references for individual vulnerability details...
CLEANSTART-2026-GE69809 compress provides various compression algorithms
Security vulnerability affects the argo-cd package. compress provides various compression algorithms...
CLEANSTART-2026-OF76171 OpenTelemetry-Go is the Go implementation of OpenTelemetry
Security vulnerability affects the argo-cd package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...
CLEANSTART-2026-DR73379 oras-go is a Go library for managing OCI artifacts
Security vulnerability affects the argo-cd package. oras-go is a Go library for managing OCI artifacts...
CLEANSTART-2026-RO55124 oras-go is a Go library for managing OCI artifacts
Security vulnerability affects the argo-cd package. oras-go is a Go library for managing OCI artifacts...
CLEANSTART-2026-XF06968 Security fix for GHSA-gxhx-2686-5h9g applied in: argo-cd 3.3.16-r2
Security vulnerability affects the argo-cd package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-ZE16342 Security fix for GHSA-hrxh-6v49-42gf applied in: argo-cd 3.3.16-r2
Security vulnerability affects the argo-cd package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-KI36555 mongo-go-driver repository contains CGo bindings for GSSAPI (Kerberos) authentication on Linux and macOS
Security vulnerability affects the argo-cd package. The mongo-go-driver repository contains CGo bindings for GSSAPI Kerberos authentication on Linux and macOS...
CLEANSTART-2026-NW06538 oras-go is a Go library for managing OCI artifacts
Security vulnerability affects the argo-cd package. oras-go is a Go library for managing OCI artifacts...
CLEANSTART-2026-ZG20556 Security fix for GHSA-259r-337f-4rfw applied in: argo-cd 3.3.16-r2
Security vulnerability affects the argo-cd package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-EF06318 Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322
Security vulnerability affects the argo-cd package. Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322...
CLEANSTART-2026-RV97727 Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello
Security vulnerability affects the argo-cd package. Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello...
CLEANSTART-2026-WN28156 go-git is an extensible git implementation library written in pure Go
Security vulnerability affects the argo-cd package. go-git is an extensible git implementation library written in pure Go...
CLEANSTART-2026-UV40371 Dial and LookupPort functions panic on Windows when provided with an input containing a NUL (0)
Security vulnerability affects the argo-cd package. The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL 0...
CLEANSTART-2026-LW33876 If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources
Security vulnerability affects the argo-cd package. If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources...
CLEANSTART-2026-RB66054 Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used
Security vulnerability affects the argo-cd package. Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used...