Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

7 matching records.

1. 23
   CVE NVD 11d ago

   Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.

   Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.1.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, when an operator has enabled --enable-helm for kustomize build, helmGlobals.configHome can point…

   CVSS 9.9 CVE-2026-113709 Kubernetes Argo Developer platform
2. 23
   CVE NVD 11d ago

   Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.

   Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.7.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Kustomize passes ref or version query values from remote resource, base, or component URLs to git…

   CVSS 9.9 CVE-2026-113708 Kubernetes Argo Developer platform
3. 23
   CVE NVD 11d ago

   Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.

   Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 0.9.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the repo-server evaluates .jsonnet files with an importer that does not confine import, importstr…

   CVSS 9.9 CVE-2026-113672 Kubernetes Argo Developer platform
4. 23
   CVE NVD 18d ago

   Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.

   Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Argo CD creates PostDelete resource hooks without applying the AppProject destination and resource…

   CVSS 9.9 CVE-2026-77459 Kubernetes Argo Developer platform
5. 15
   CVE NVD 22d ago

   Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.

   Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.11.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the Argo CD repo-server is vulnerable to command injection when it clones, tests, or fetches an SSH…

   CVSS 8.8 CVE-2026-55797 Kubernetes Argo Developer platform
6. 8
   CVE NVD 21d ago

   argocd-mcp (Argo CD MCP Server) through 0.9.0 contains a path traversal vulnerability in the delete_application tool that allows MCP clients to reach…

   argocd-mcp (Argo CD MCP Server) through 0.9.0 contains a path traversal vulnerability in the delete_application tool that allows MCP clients to reach unintended API endpoints via unvalidated applicationName values. Attackers or…

   CVSS 5.4 CVE-2026-108585 Argo Anthropic Developer platform
7. 5
   CVE NVD 22d ago

   A race condition vulnerability in the SessionManager of CNCF: Cloud Native Computing Foundation Argo CD v3.0.6 allows attackers to bypass rate…

   A race condition vulnerability in the SessionManager of CNCF: Cloud Native Computing Foundation Argo CD v3.0.6 allows attackers to bypass rate limiting and perform a brute force attack via repeated crafted requests.

   CVE-2025-61560 Argo Developer platform

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Argo&limit=100. RSS for this section: feed.xml.