Vulnerabilities in argoproj
74 resultsCVE-2025-23216MEDIUMArgo CD does not scrub secret values from patch errorsEPSS 0.5%CVE-2026-62185HIGHArgo CD Helm Chart < 10.0.0 Missing Network Policy RCEEPSS 0.5%CVE-2024-31990MEDIUMArgo CD' API server does not enforce project sourceNamespacesEPSS 0.4%CVE-2026-93991HIGHArgo Workflows 4.1.0 through 4.1.3 Cross-Namespace Disclosure via Negated SelectorEPSS 0.4%CVE-2026-42296HIGHArgo Workflows has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/SecureEPSS 0.4%CVE-2026-23960HIGHArgo Workflows affected by stored XSS in the artifact directory listingEPSS 0.4%CVE-2024-36106MEDIUMArgo CD allows authenticated users to enumerate clusters by nameEPSS 0.4%CVE-2026-42183LOWArgo Workflows: SSO RBAC Delegation Nil Pointer Dereference DoS (gatekeeper.go)EPSS 0.4%CVE-2026-40886HIGHArgo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows controllerEPSS 0.4%CVE-2024-47827MEDIUMArgo Workflows Controller: Denial of Service via malicious daemon WorkflowsEPSS 0.4%CVE-2026-42295HIGHArgo Workflows: Exposure of artifact repository credentialsEPSS 0.4%CVE-2026-43824HIGHIn Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data.EPSS 0.3%CVE-2024-52799HIGHArgo Workflows Chart: Excessive Privileges in Workflow RoleEPSS 0.2%CVE-2024-52814LOWHelm Lacks Granularity in Workflow RoleEPSS 0.2%