1056 matches found
CVE-2026-82456
argocd-mcp version 0.8.0 (argoproj-labs) has an authentication bypass via its unauthenticated HTTP transport. The server binds to all network interfaces and accepts MCP sessions without requiring caller credentials when the ARGOCD_API_TOKEN environment variable is configured. Any network-reachabl...
BIT-ARGO-CD-2025-55191 Repository Credentials Race Condition Crashes Argo CD Server
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions between 2.1.0 and 2.14.19, 3.2.0, 3.1.0 through 3.1.7, and 3.0.0 through 3.0.18 contain a race condition in the repository credentials handler that can cause the Argo CD server to panic and crash when concurrent...
GO-2025-3521 vulnerabilities
Vulnerabilities for packages: longhorn-share-manager-fips, vcluster, harvester-fips, longhorn-manager-fips, argo-cd-fips, longhorn-share-manager, azure-container-networking, rke2-runtime-fips, harvester, spark-operator-fips, longhorn-manager, kubernetes...
GO-2025-3547 vulnerabilities
Vulnerabilities for packages: longhorn-share-manager-fips, kubernetes-csi-driver-hostpath, harvester-fips, longhorn-manager, longhorn-manager-fips, argo-cd-fips, longhorn-share-manager, cluster-autoscaler-fips, rancher-system-agent, rke2-runtime-fips, harvester, azurefile-csi-fips, eks-distro,...
GO-2026-5882 vulnerabilities
Vulnerabilities for packages: crossplane-fips, vcluster, chaos-mesh, gitness, helm-exporter-fips, headlamp, xeol-fips, kube-arangodb, ocm-cli-fips, kyverno-fips, kubescape-server, linkerd2, trivy-operator-fips, kots, trivy-operator, zarf-fips, eksctl, headlamp-fips, chartmuseum, k9s,...
GO-2026-5418 vulnerabilities
Vulnerabilities for packages: argocd-image-updater-fips, argo-cd, argocd-image-updater...
GO-2026-5693 vulnerabilities
Vulnerabilities for packages: flux, gitaly, gitlab-rails-ce-fips, grafana-fips, flux-fips, argo-cd-fips, argo-cd, grafana, guac, nemo, terragrunt, external-secrets-operator-fips, external-secrets-operator, terragrunt-fips, teleport, gitlab-rails-ce, upwind-agent...
GO-2026-5885 vulnerabilities
Vulnerabilities for packages: crossplane-fips, vcluster, chaos-mesh, harvester-fips, gitness, helm-exporter-fips, headlamp, xeol-fips, kube-arangodb, ocm-cli-fips, kyverno-fips, kubescape-server, linkerd2, trivy-operator-fips, kots, trivy-operator, zarf-fips, eksctl, headlamp-fips, chartmuseum,...
GO-2026-5618 vulnerabilities
Vulnerabilities for packages: argocd-image-updater-fips, argo-cd, argocd-image-updater...
GO-2025-3994 vulnerabilities
Vulnerabilities for packages: argo-cd...
GO-2025-3995 vulnerabilities
Vulnerabilities for packages: argo-cd...
GO-2025-3540 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector, fluent-bit-plugin-loki, keda, argo-cd-fips, argo-cd, falcosidekick-fips, loki-fips, traefik-fips, loki, rekor-fips, opentelemetry-collector-contrib-fips, kots, atlantis, gitea-fips, gitea, splunk-otel-collector-fips, juicefs, falcosidekick,...
GO-2026-5410 vulnerabilities
Vulnerabilities for packages: kubewatch, kyverno-policy-reporter-fips, argo-cd-fips, argo-cd, argo-rollouts-fips, argo-events-fips, peerdb-flow, bento-fips, argo-rollouts, bento, ory-kratos-fips, kyverno-policy-reporter, ory-kratos, goreleaser, kubernetes-event-exporter-fips, atlantis-fips,...
GO-2024-3002 vulnerabilities
Vulnerabilities for packages: argo-cd...
GO-2025-3720 vulnerabilities
Vulnerabilities for packages: argocd-image-updater-fips, argo-cd, argocd-image-updater...
GO-2025-3934 vulnerabilities
Vulnerabilities for packages: argocd-image-updater-fips, argo-cd, argocd-image-updater...
GO-2025-3996 vulnerabilities
Vulnerabilities for packages: argo-cd...
GO-2024-2883 vulnerabilities
Vulnerabilities for packages: fulcio-fips, cortex-fips, cortex, timestamp-authority, rekor, prometheus-alertmanager, argo-cd, fulcio, timestamp-authority-fips, prometheus-alertmanager-fips, grafana-mimir, rekor-fips...