github.com/argoproj/argo-cd/v3 vulnerabilities
CVEs whose affected-version data names the github.com/argoproj/argo-cd/v3 package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-55797High· 8.8Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.11.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the Argo CD repo-server is vulnerable to command injection when it clones, tests, or fetches an SSH Git rep…
▾ Twilightargoproj · github.com/argoproj/argo-cd/v2EPSS 1.9%via NVD
CVE-2026-42880Critical· 9.6PoCArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction
ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction
▾ Abyssalargoproj · github.com/argoproj/argo-cd/v3EPSS 0.65%via OSV
CVE-2025-47933Critical· 9.0Argo CD allows cross-site scripting on repositories page
Argo CD allows cross-site scripting on repositories page
▾ Midnightargoproj · github.com/argoproj/argo-cdEPSS 0.49%via OSV