Vulnerabilidades en argoproj
74 resultadosCVE-2022-31102LOWCross-site Scripting for Argo CD single sign on usersEPSS 0.6%CVE-2023-40026MEDIUMPath traversal allows leaking out-of-bound Helm charts from Argo CD repo-serverEPSS 0.6%CVE-2026-45738HIGHArgo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalationEPSS 0.6%CVE-2025-62156HIGHargo-workflows Zip Slip path traversal allows arbitrary file write and container configuration overwriteEPSS 0.6%CVE-2025-59537HIGHargo-cd is vulnerable to unauthenticated DoS attack via malformed Gogs webhook payloadEPSS 0.6%CVE-2026-42294HIGHArgo Workflows: Unauthenticated Memory Exhaustion (DoS) in Webhook InterceptorEPSS 0.6%CVE-2025-59531HIGHUnauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payloadEPSS 0.6%CVE-2023-40025MEDIUMArgo CD web terminal session doesn't expireEPSS 0.6%CVE-2026-31892HIGHWorkflowTemplate Security Bypass via podSpecPatch in Strict/Secure Reference ModeEPSS 0.6%CVE-2026-54526HIGHArgo Workflows: Incomplete fix for CVE-2026-31892: ArtifactGC.PodSpecPatch bypass of Strict/Secure templateReferencingEPSS 0.6%CVE-2023-50726MEDIUMUsers with `create` but not `override` privileges can perform local sync in argo-cdEPSS 0.5%CVE-2026-113709CRITICALArgo CD: A Kustomize Helm config home can run commands in the repo-serverEPSS 0.5%CVE-2026-45737MEDIUMArgo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotationsEPSS 0.5%CVE-2026-42297HIGHArgo Workflows Is Missing Authorization in Sync ConfigMap ProviderEPSS 0.5%CVE-2026-77459CRITICALArgo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooksEPSS 0.5%CVE-2025-47933CRITICALArgo CD allows cross-site scripting on repositories pageEPSS 0.5%CVE-2024-22424HIGHCross-Site Request Forgery (CSRF) in github.com/argoproj/argo-cdEPSS 0.5%CVE-2025-55191MEDIUMRepository Credentials Race Condition Crashes Argo CD ServerEPSS 0.5%CVE-2025-62157HIGHArgo Workflows exposes artifact repository credentials in workflow-controller logsEPSS 0.5%CVE-2026-15416HIGHArgo-cd: argo cd unauthenticated remote code execution in repo-server via generatemanifest grpc endpointEPSS 0.5%