github.com/argoproj/argo-cd/v3
Declarative Continuous Deployment for Kubernetes
View on Github
Activity
- Latest release
- 1w ago
- Total releases
- 78
- Cadence
- ~3 days
- Last 12 months
- 56
Reach
- Stars
- 24.5k
Details
- First release
- Mar 17, 2025
| Version | Released | |
|---|---|---|
v3.6.0-rc4
pre
|
v3.6.0-rc4
pre
Dependencies (127)
+ 119 more |
|
v3.4.12
patch
|
v3.4.12
patch
Dependencies (122)
+ 114 more |
|
v3.5.6
patch
|
v3.5.6
patch
Dependencies (125)
+ 117 more |
|
v3.6.0-rc3
pre
|
v3.6.0-rc3
pre
Dependencies (127)
+ 119 more |
|
v3.5.5
patch
|
v3.5.5
patch
Dependencies (125)
+ 117 more |
|
v3.4.11
patch
|
v3.4.11
patch
Dependencies (122)
+ 114 more |
|
v3.4.10
patch
|
v3.4.10
patch
Dependencies (121)
+ 113 more |
|
v3.5.4
patch
|
v3.5.4
patch
Dependencies (125)
+ 117 more |
|
v3.6.0-rc2
pre
|
v3.6.0-rc2
pre
Dependencies (127)
+ 119 more |
|
v3.6.0-rc1
pre
2 CVEs
CVE-2026-77459
GO-2026-6784
BIT-argo-cd-2026-77459
GHSA-fmxq-cgp8-87wp
Oct 19, 2026
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References
Updated Oct 20, 2026 · Source: OSV.dev
CVE-2026-55797
GO-2026-6701
BIT-argo-cd-2026-55797
GHSA-j6cw-g6p4-7hch
Oct 19, 2026
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References Updated Oct 19, 2026 · Source: OSV.dev |
v3.6.0-rc1
pre
Dependencies (127)
+ 119 more |
|
v3.5.3
patch
2 CVEs
CVE-2026-77459
GO-2026-6784
BIT-argo-cd-2026-77459
GHSA-fmxq-cgp8-87wp
Oct 19, 2026
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References
Updated Oct 20, 2026 · Source: OSV.dev
CVE-2026-55797
GO-2026-6701
BIT-argo-cd-2026-55797
GHSA-j6cw-g6p4-7hch
Oct 19, 2026
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References Updated Oct 19, 2026 · Source: OSV.dev |
v3.5.3
patch
Dependencies (125)
+ 117 more |
|
v3.4.9
patch
2 CVEs
CVE-2026-77459
GO-2026-6784
BIT-argo-cd-2026-77459
GHSA-fmxq-cgp8-87wp
Oct 19, 2026
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References
Updated Oct 20, 2026 · Source: OSV.dev
CVE-2026-55797
GO-2026-6701
BIT-argo-cd-2026-55797
GHSA-j6cw-g6p4-7hch
Oct 19, 2026
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References Updated Oct 19, 2026 · Source: OSV.dev |
v3.4.9
patch
Dependencies (121)
+ 113 more |
|
v3.5.2
patch
2 CVEs
CVE-2026-77459
GO-2026-6784
BIT-argo-cd-2026-77459
GHSA-fmxq-cgp8-87wp
Oct 19, 2026
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References
Updated Oct 20, 2026 · Source: OSV.dev
CVE-2026-55797
GO-2026-6701
BIT-argo-cd-2026-55797
GHSA-j6cw-g6p4-7hch
Oct 19, 2026
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References Updated Oct 19, 2026 · Source: OSV.dev |
v3.5.2
patch
Dependencies (125)
+ 117 more |
|
v3.4.8
patch
2 CVEs
CVE-2026-77459
GO-2026-6784
BIT-argo-cd-2026-77459
GHSA-fmxq-cgp8-87wp
Oct 19, 2026
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References
Updated Oct 20, 2026 · Source: OSV.dev
CVE-2026-55797
GO-2026-6701
BIT-argo-cd-2026-55797
GHSA-j6cw-g6p4-7hch
Oct 19, 2026
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References Updated Oct 19, 2026 · Source: OSV.dev |
v3.4.8
patch
Dependencies (121)
+ 113 more |
|
v3.5.1
patch
2 CVEs
CVE-2026-77459
GO-2026-6784
BIT-argo-cd-2026-77459
GHSA-fmxq-cgp8-87wp
Oct 19, 2026
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References
Updated Oct 20, 2026 · Source: OSV.dev
CVE-2026-55797
GO-2026-6701
BIT-argo-cd-2026-55797
GHSA-j6cw-g6p4-7hch
Oct 19, 2026
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References Updated Oct 19, 2026 · Source: OSV.dev |
v3.5.1
patch
Dependencies (125)
+ 117 more |
|
v3.3.14
patch
2 CVEs
CVE-2026-77459
GO-2026-6784
BIT-argo-cd-2026-77459
GHSA-fmxq-cgp8-87wp
Oct 19, 2026
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References
Updated Oct 20, 2026 · Source: OSV.dev
CVE-2026-55797
GO-2026-6701
BIT-argo-cd-2026-55797
GHSA-j6cw-g6p4-7hch
Oct 19, 2026
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References Updated Oct 19, 2026 · Source: OSV.dev |
v3.3.14
patch
Dependencies (113)
+ 105 more |
|
v3.4.7
patch
2 CVEs
CVE-2026-77459
GO-2026-6784
BIT-argo-cd-2026-77459
GHSA-fmxq-cgp8-87wp
Oct 19, 2026
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References
Updated Oct 20, 2026 · Source: OSV.dev
CVE-2026-55797
GO-2026-6701
BIT-argo-cd-2026-55797
GHSA-j6cw-g6p4-7hch
Oct 19, 2026
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References Updated Oct 19, 2026 · Source: OSV.dev |
v3.4.7
patch
Dependencies (121)
+ 113 more |
|
v3.5.0
minor
2 CVEs
CVE-2026-77459
GO-2026-6784
BIT-argo-cd-2026-77459
GHSA-fmxq-cgp8-87wp
Oct 19, 2026
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References
Updated Oct 20, 2026 · Source: OSV.dev
CVE-2026-55797
GO-2026-6701
BIT-argo-cd-2026-55797
GHSA-j6cw-g6p4-7hch
Oct 19, 2026
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References Updated Oct 19, 2026 · Source: OSV.dev |
v3.5.0
minor
Dependencies (125)
+ 117 more |
|
v3.3.13
patch
2 CVEs
CVE-2026-77459
GO-2026-6784
BIT-argo-cd-2026-77459
GHSA-fmxq-cgp8-87wp
Oct 19, 2026
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References
Updated Oct 20, 2026 · Source: OSV.dev
CVE-2026-55797
GO-2026-6701
BIT-argo-cd-2026-55797
GHSA-j6cw-g6p4-7hch
Oct 19, 2026
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References Updated Oct 19, 2026 · Source: OSV.dev |
v3.3.13
patch
Dependencies (113)
+ 105 more |
|
v3.4.6
patch
2 CVEs
CVE-2026-77459
GO-2026-6784
BIT-argo-cd-2026-77459
GHSA-fmxq-cgp8-87wp
Oct 19, 2026
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References
Updated Oct 20, 2026 · Source: OSV.dev
CVE-2026-55797
GO-2026-6701
BIT-argo-cd-2026-55797
GHSA-j6cw-g6p4-7hch
Oct 19, 2026
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References Updated Oct 19, 2026 · Source: OSV.dev |
v3.4.6
patch
Dependencies (121)
+ 113 more |
|
v3.5.0-rc3
pre
|
v3.5.0-rc3
pre
Dependencies (125)
+ 117 more |
|
v3.4.5
patch
2 CVEs
CVE-2026-77459
GO-2026-6784
BIT-argo-cd-2026-77459
GHSA-fmxq-cgp8-87wp
Oct 19, 2026
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References
Updated Oct 20, 2026 · Source: OSV.dev
CVE-2026-55797
GO-2026-6701
BIT-argo-cd-2026-55797
GHSA-j6cw-g6p4-7hch
Oct 19, 2026
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References Updated Oct 19, 2026 · Source: OSV.dev |
v3.4.5
patch
Dependencies (121)
+ 113 more |
|
v3.5.0-rc2
pre
|
v3.5.0-rc2
pre
Dependencies (125)
+ 117 more |
|
v3.4.4
patch
2 CVEs
CVE-2026-77459
GO-2026-6784
BIT-argo-cd-2026-77459
GHSA-fmxq-cgp8-87wp
Oct 19, 2026
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References
Updated Oct 20, 2026 · Source: OSV.dev
CVE-2026-55797
GO-2026-6701
BIT-argo-cd-2026-55797
GHSA-j6cw-g6p4-7hch
Oct 19, 2026
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References Updated Oct 19, 2026 · Source: OSV.dev |
v3.4.4
patch
Dependencies (121)
+ 113 more |
|
v3.3.12
patch
2 CVEs
CVE-2026-77459
GO-2026-6784
BIT-argo-cd-2026-77459
GHSA-fmxq-cgp8-87wp
Oct 19, 2026
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References
Updated Oct 20, 2026 · Source: OSV.dev
CVE-2026-55797
GO-2026-6701
BIT-argo-cd-2026-55797
GHSA-j6cw-g6p4-7hch
Oct 19, 2026
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References Updated Oct 19, 2026 · Source: OSV.dev |
v3.3.12
patch
Dependencies (113)
+ 105 more |
|
v3.5.0-rc1
pre
|
v3.5.0-rc1
pre
Dependencies (125)
+ 117 more |
|
v3.4.3
patch
2 CVEs
CVE-2026-77459
GO-2026-6784
BIT-argo-cd-2026-77459
GHSA-fmxq-cgp8-87wp
Oct 19, 2026
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References
Updated Oct 20, 2026 · Source: OSV.dev
CVE-2026-55797
GO-2026-6701
BIT-argo-cd-2026-55797
GHSA-j6cw-g6p4-7hch
Oct 19, 2026
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References Updated Oct 19, 2026 · Source: OSV.dev |
v3.4.3
patch
Dependencies (121)
+ 113 more |
|
v3.2.12
patch
2 CVEs
CVE-2026-77459
GO-2026-6784
BIT-argo-cd-2026-77459
GHSA-fmxq-cgp8-87wp
Oct 19, 2026
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References
Updated Oct 20, 2026 · Source: OSV.dev
CVE-2026-55797
GO-2026-6701
BIT-argo-cd-2026-55797
GHSA-j6cw-g6p4-7hch
Oct 19, 2026
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References Updated Oct 19, 2026 · Source: OSV.dev |
v3.2.12
patch
Dependencies (112)
+ 104 more |
|
v3.4.2
patch
2 CVEs
CVE-2026-77459
GO-2026-6784
BIT-argo-cd-2026-77459
GHSA-fmxq-cgp8-87wp
Oct 19, 2026
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References
Updated Oct 20, 2026 · Source: OSV.dev
CVE-2026-55797
GO-2026-6701
BIT-argo-cd-2026-55797
GHSA-j6cw-g6p4-7hch
Oct 19, 2026
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References Updated Oct 19, 2026 · Source: OSV.dev |
v3.4.2
patch
Dependencies (121)
+ 113 more |
|
v3.4.1
patch
4 CVEs
CVE-2026-77459
GO-2026-6784
BIT-argo-cd-2026-77459
GHSA-fmxq-cgp8-87wp
Oct 19, 2026
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References
Updated Oct 20, 2026 · Source: OSV.dev
CVE-2026-55797
GO-2026-6701
BIT-argo-cd-2026-55797
GHSA-j6cw-g6p4-7hch
Oct 19, 2026
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-45737
GO-2026-5618
BIT-argo-cd-2026-45737
GHSA-rg3g-4rw9-gqrp
Jun 25, 2026
Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd Fixed in
3.2.12
3.3.10
3.4.2
Updated Jul 20, 2026 · Source: OSV.dev
CVE-2026-45738
GO-2026-5418
BIT-argo-cd-2026-45738
GHSA-h98r-wv3h-fr38
Jun 25, 2026
Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Fixed in
3.2.12
3.3.10
3.4.2
Updated Jul 21, 2026 · Source: OSV.dev |
v3.4.1
patch
Dependencies (121)
+ 113 more |
|
v3.4.0
minor
4 CVEs
CVE-2026-77459
GO-2026-6784
BIT-argo-cd-2026-77459
GHSA-fmxq-cgp8-87wp
Oct 19, 2026
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References
Updated Oct 20, 2026 · Source: OSV.dev
CVE-2026-55797
GO-2026-6701
BIT-argo-cd-2026-55797
GHSA-j6cw-g6p4-7hch
Oct 19, 2026
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-45737
GO-2026-5618
BIT-argo-cd-2026-45737
GHSA-rg3g-4rw9-gqrp
Jun 25, 2026
Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd Fixed in
3.2.12
3.3.10
3.4.2
Updated Jul 20, 2026 · Source: OSV.dev
CVE-2026-45738
GO-2026-5418
BIT-argo-cd-2026-45738
GHSA-h98r-wv3h-fr38
Jun 25, 2026
Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Fixed in
3.2.12
3.3.10
3.4.2
Updated Jul 21, 2026 · Source: OSV.dev |
v3.4.0
minor
Dependencies (121)
+ 113 more |
|
v3.4.0-rc7
pre
2 CVEs
CVE-2026-45737
GO-2026-5618
BIT-argo-cd-2026-45737
GHSA-rg3g-4rw9-gqrp
Jun 25, 2026
Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd Fixed in
3.2.12
3.3.10
3.4.2
Updated Jul 20, 2026 · Source: OSV.dev
CVE-2026-45738
GO-2026-5418
BIT-argo-cd-2026-45738
GHSA-h98r-wv3h-fr38
Jun 25, 2026
Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Fixed in
3.2.12
3.3.10
3.4.2
Updated Jul 21, 2026 · Source: OSV.dev |
v3.4.0-rc7
pre
Dependencies (121)
+ 113 more |
|
v3.4.0-rc6
pre
2 CVEs
CVE-2026-45737
GO-2026-5618
BIT-argo-cd-2026-45737
GHSA-rg3g-4rw9-gqrp
Jun 25, 2026
Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd Fixed in
3.2.12
3.3.10
3.4.2
Updated Jul 20, 2026 · Source: OSV.dev
CVE-2026-45738
GO-2026-5418
BIT-argo-cd-2026-45738
GHSA-h98r-wv3h-fr38
Jun 25, 2026
Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Fixed in
3.2.12
3.3.10
3.4.2
Updated Jul 21, 2026 · Source: OSV.dev |
v3.4.0-rc6
pre
Dependencies (121)
+ 113 more |
|
v3.2.10
patch
5 CVEs
CVE-2026-77459
GO-2026-6784
BIT-argo-cd-2026-77459
GHSA-fmxq-cgp8-87wp
Oct 19, 2026
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References
Updated Oct 20, 2026 · Source: OSV.dev
CVE-2026-55797
GO-2026-6701
BIT-argo-cd-2026-55797
GHSA-j6cw-g6p4-7hch
Oct 19, 2026
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-45737
GO-2026-5618
BIT-argo-cd-2026-45737
GHSA-rg3g-4rw9-gqrp
Jun 25, 2026
Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd Fixed in
3.2.12
3.3.10
3.4.2
Updated Jul 20, 2026 · Source: OSV.dev
CVE-2026-45738
GO-2026-5418
BIT-argo-cd-2026-45738
GHSA-h98r-wv3h-fr38
Jun 25, 2026
Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Fixed in
3.2.12
3.3.10
3.4.2
Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-42880
GO-2026-5099
BIT-argo-cd-2026-42880
CVE-2026-43824
GHSA-3v3m-wc6v-x4x3
Jun 25, 2026
ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction in github.com/argoproj/argo-cd ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction in github.com/argoproj/argo-cd Fixed in
3.2.11
3.3.9
References Updated Jul 08, 2026 · Source: OSV.dev |
v3.2.10
patch
Dependencies (112)
+ 104 more |
|
v3.1.15
patch
3 CVEs
CVE-2026-77459
GO-2026-6784
BIT-argo-cd-2026-77459
GHSA-fmxq-cgp8-87wp
Oct 19, 2026
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References
Updated Oct 20, 2026 · Source: OSV.dev
CVE-2026-55797
GO-2026-6701
BIT-argo-cd-2026-55797
GHSA-j6cw-g6p4-7hch
Oct 19, 2026
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-45738
GO-2026-5418
BIT-argo-cd-2026-45738
GHSA-h98r-wv3h-fr38
Jun 25, 2026
Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Fixed in
3.2.12
3.3.10
3.4.2
Updated Jul 21, 2026 · Source: OSV.dev |
v3.1.15
patch
Dependencies (113)
+ 105 more |
|
v3.4.0-rc5
pre
2 CVEs
CVE-2026-45737
GO-2026-5618
BIT-argo-cd-2026-45737
GHSA-rg3g-4rw9-gqrp
Jun 25, 2026
Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd Fixed in
3.2.12
3.3.10
3.4.2
Updated Jul 20, 2026 · Source: OSV.dev
CVE-2026-45738
GO-2026-5418
BIT-argo-cd-2026-45738
GHSA-h98r-wv3h-fr38
Jun 25, 2026
Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Fixed in
3.2.12
3.3.10
3.4.2
Updated Jul 21, 2026 · Source: OSV.dev |
v3.4.0-rc5
pre
Dependencies (121)
+ 113 more |
|
v3.2.9
patch
5 CVEs
CVE-2026-77459
GO-2026-6784
BIT-argo-cd-2026-77459
GHSA-fmxq-cgp8-87wp
Oct 19, 2026
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References
Updated Oct 20, 2026 · Source: OSV.dev
CVE-2026-55797
GO-2026-6701
BIT-argo-cd-2026-55797
GHSA-j6cw-g6p4-7hch
Oct 19, 2026
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-45737
GO-2026-5618
BIT-argo-cd-2026-45737
GHSA-rg3g-4rw9-gqrp
Jun 25, 2026
Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd Fixed in
3.2.12
3.3.10
3.4.2
Updated Jul 20, 2026 · Source: OSV.dev
CVE-2026-45738
GO-2026-5418
BIT-argo-cd-2026-45738
GHSA-h98r-wv3h-fr38
Jun 25, 2026
Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Fixed in
3.2.12
3.3.10
3.4.2
Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-42880
GO-2026-5099
BIT-argo-cd-2026-42880
CVE-2026-43824
GHSA-3v3m-wc6v-x4x3
Jun 25, 2026
ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction in github.com/argoproj/argo-cd ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction in github.com/argoproj/argo-cd Fixed in
3.2.11
3.3.9
References Updated Jul 08, 2026 · Source: OSV.dev |
v3.2.9
patch
Dependencies (112)
+ 104 more |
|
v3.1.14
patch
3 CVEs
CVE-2026-77459
GO-2026-6784
BIT-argo-cd-2026-77459
GHSA-fmxq-cgp8-87wp
Oct 19, 2026
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References
Updated Oct 20, 2026 · Source: OSV.dev
CVE-2026-55797
GO-2026-6701
BIT-argo-cd-2026-55797
GHSA-j6cw-g6p4-7hch
Oct 19, 2026
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-45738
GO-2026-5418
BIT-argo-cd-2026-45738
GHSA-h98r-wv3h-fr38
Jun 25, 2026
Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Fixed in
3.2.12
3.3.10
3.4.2
Updated Jul 21, 2026 · Source: OSV.dev |
v3.1.14
patch
Dependencies (113)
+ 105 more |
|
v3.3.7
patch
5 CVEs
CVE-2026-77459
GO-2026-6784
BIT-argo-cd-2026-77459
GHSA-fmxq-cgp8-87wp
Oct 19, 2026
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References
Updated Oct 20, 2026 · Source: OSV.dev
CVE-2026-55797
GO-2026-6701
BIT-argo-cd-2026-55797
GHSA-j6cw-g6p4-7hch
Oct 19, 2026
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-45737
GO-2026-5618
BIT-argo-cd-2026-45737
GHSA-rg3g-4rw9-gqrp
Jun 25, 2026
Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd Fixed in
3.2.12
3.3.10
3.4.2
Updated Jul 20, 2026 · Source: OSV.dev
CVE-2026-45738
GO-2026-5418
BIT-argo-cd-2026-45738
GHSA-h98r-wv3h-fr38
Jun 25, 2026
Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Fixed in
3.2.12
3.3.10
3.4.2
Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-42880
GO-2026-5099
BIT-argo-cd-2026-42880
CVE-2026-43824
GHSA-3v3m-wc6v-x4x3
Jun 25, 2026
ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction in github.com/argoproj/argo-cd ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction in github.com/argoproj/argo-cd Fixed in
3.2.11
3.3.9
References Updated Jul 08, 2026 · Source: OSV.dev |
v3.3.7
patch
Dependencies (113)
+ 105 more |
|
v3.4.0-rc4
pre
2 CVEs
CVE-2026-45737
GO-2026-5618
BIT-argo-cd-2026-45737
GHSA-rg3g-4rw9-gqrp
Jun 25, 2026
Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd Fixed in
3.2.12
3.3.10
3.4.2
Updated Jul 20, 2026 · Source: OSV.dev
CVE-2026-45738
GO-2026-5418
BIT-argo-cd-2026-45738
GHSA-h98r-wv3h-fr38
Jun 25, 2026
Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Fixed in
3.2.12
3.3.10
3.4.2
Updated Jul 21, 2026 · Source: OSV.dev |
v3.4.0-rc4
pre
Dependencies (121)
+ 113 more |
|
v3.3.5
patch
5 CVEs
CVE-2026-77459
GO-2026-6784
BIT-argo-cd-2026-77459
GHSA-fmxq-cgp8-87wp
Oct 19, 2026
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References
Updated Oct 20, 2026 · Source: OSV.dev
CVE-2026-55797
GO-2026-6701
BIT-argo-cd-2026-55797
GHSA-j6cw-g6p4-7hch
Oct 19, 2026
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-45737
GO-2026-5618
BIT-argo-cd-2026-45737
GHSA-rg3g-4rw9-gqrp
Jun 25, 2026
Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd Fixed in
3.2.12
3.3.10
3.4.2
Updated Jul 20, 2026 · Source: OSV.dev
CVE-2026-45738
GO-2026-5418
BIT-argo-cd-2026-45738
GHSA-h98r-wv3h-fr38
Jun 25, 2026
Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Fixed in
3.2.12
3.3.10
3.4.2
Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-42880
GO-2026-5099
BIT-argo-cd-2026-42880
CVE-2026-43824
GHSA-3v3m-wc6v-x4x3
Jun 25, 2026
ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction in github.com/argoproj/argo-cd ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction in github.com/argoproj/argo-cd Fixed in
3.2.11
3.3.9
References Updated Jul 08, 2026 · Source: OSV.dev |
v3.3.5
patch
Dependencies (113)
+ 105 more |
|
v3.4.0-rc3
pre
2 CVEs
CVE-2026-45737
GO-2026-5618
BIT-argo-cd-2026-45737
GHSA-rg3g-4rw9-gqrp
Jun 25, 2026
Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd Fixed in
3.2.12
3.3.10
3.4.2
Updated Jul 20, 2026 · Source: OSV.dev
CVE-2026-45738
GO-2026-5418
BIT-argo-cd-2026-45738
GHSA-h98r-wv3h-fr38
Jun 25, 2026
Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Fixed in
3.2.12
3.3.10
3.4.2
Updated Jul 21, 2026 · Source: OSV.dev |
v3.4.0-rc3
pre
Dependencies (121)
+ 113 more |
|
v3.4.0-rc2
pre
2 CVEs
CVE-2026-45737
GO-2026-5618
BIT-argo-cd-2026-45737
GHSA-rg3g-4rw9-gqrp
Jun 25, 2026
Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd Fixed in
3.2.12
3.3.10
3.4.2
Updated Jul 20, 2026 · Source: OSV.dev
CVE-2026-45738
GO-2026-5418
BIT-argo-cd-2026-45738
GHSA-h98r-wv3h-fr38
Jun 25, 2026
Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Fixed in
3.2.12
3.3.10
3.4.2
Updated Jul 21, 2026 · Source: OSV.dev |
v3.4.0-rc2
pre
Dependencies (121)
+ 113 more |
|
v3.3.4
patch
5 CVEs
CVE-2026-77459
GO-2026-6784
BIT-argo-cd-2026-77459
GHSA-fmxq-cgp8-87wp
Oct 19, 2026
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References
Updated Oct 20, 2026 · Source: OSV.dev
CVE-2026-55797
GO-2026-6701
BIT-argo-cd-2026-55797
GHSA-j6cw-g6p4-7hch
Oct 19, 2026
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-45737
GO-2026-5618
BIT-argo-cd-2026-45737
GHSA-rg3g-4rw9-gqrp
Jun 25, 2026
Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd Fixed in
3.2.12
3.3.10
3.4.2
Updated Jul 20, 2026 · Source: OSV.dev
CVE-2026-45738
GO-2026-5418
BIT-argo-cd-2026-45738
GHSA-h98r-wv3h-fr38
Jun 25, 2026
Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Fixed in
3.2.12
3.3.10
3.4.2
Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-42880
GO-2026-5099
BIT-argo-cd-2026-42880
CVE-2026-43824
GHSA-3v3m-wc6v-x4x3
Jun 25, 2026
ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction in github.com/argoproj/argo-cd ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction in github.com/argoproj/argo-cd Fixed in
3.2.11
3.3.9
References Updated Jul 08, 2026 · Source: OSV.dev |
v3.3.4
patch
Dependencies (113)
+ 105 more |
|
v3.4.0-rc1
pre
2 CVEs
CVE-2026-45737
GO-2026-5618
BIT-argo-cd-2026-45737
GHSA-rg3g-4rw9-gqrp
Jun 25, 2026
Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd Fixed in
3.2.12
3.3.10
3.4.2
Updated Jul 20, 2026 · Source: OSV.dev
CVE-2026-45738
GO-2026-5418
BIT-argo-cd-2026-45738
GHSA-h98r-wv3h-fr38
Jun 25, 2026
Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Fixed in
3.2.12
3.3.10
3.4.2
Updated Jul 21, 2026 · Source: OSV.dev |
v3.4.0-rc1
pre
Dependencies (121)
+ 113 more |
|
v3.3.2
patch
5 CVEs
CVE-2026-77459
GO-2026-6784
BIT-argo-cd-2026-77459
GHSA-fmxq-cgp8-87wp
Oct 19, 2026
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References
Updated Oct 20, 2026 · Source: OSV.dev
CVE-2026-55797
GO-2026-6701
BIT-argo-cd-2026-55797
GHSA-j6cw-g6p4-7hch
Oct 19, 2026
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-45737
GO-2026-5618
BIT-argo-cd-2026-45737
GHSA-rg3g-4rw9-gqrp
Jun 25, 2026
Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd Fixed in
3.2.12
3.3.10
3.4.2
Updated Jul 20, 2026 · Source: OSV.dev
CVE-2026-45738
GO-2026-5418
BIT-argo-cd-2026-45738
GHSA-h98r-wv3h-fr38
Jun 25, 2026
Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Fixed in
3.2.12
3.3.10
3.4.2
Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-42880
GO-2026-5099
BIT-argo-cd-2026-42880
CVE-2026-43824
GHSA-3v3m-wc6v-x4x3
Jun 25, 2026
ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction in github.com/argoproj/argo-cd ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction in github.com/argoproj/argo-cd Fixed in
3.2.11
3.3.9
References Updated Jul 08, 2026 · Source: OSV.dev |
v3.3.2
patch
Dependencies (113)
+ 105 more |
|
v3.3.1
minor
5 CVEs
CVE-2026-77459
GO-2026-6784
BIT-argo-cd-2026-77459
GHSA-fmxq-cgp8-87wp
Oct 19, 2026
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References
Updated Oct 20, 2026 · Source: OSV.dev
CVE-2026-55797
GO-2026-6701
BIT-argo-cd-2026-55797
GHSA-j6cw-g6p4-7hch
Oct 19, 2026
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-45737
GO-2026-5618
BIT-argo-cd-2026-45737
GHSA-rg3g-4rw9-gqrp
Jun 25, 2026
Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd Fixed in
3.2.12
3.3.10
3.4.2
Updated Jul 20, 2026 · Source: OSV.dev
CVE-2026-45738
GO-2026-5418
BIT-argo-cd-2026-45738
GHSA-h98r-wv3h-fr38
Jun 25, 2026
Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Fixed in
3.2.12
3.3.10
3.4.2
Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-42880
GO-2026-5099
BIT-argo-cd-2026-42880
CVE-2026-43824
GHSA-3v3m-wc6v-x4x3
Jun 25, 2026
ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction in github.com/argoproj/argo-cd ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction in github.com/argoproj/argo-cd Fixed in
3.2.11
3.3.9
References Updated Jul 08, 2026 · Source: OSV.dev |
v3.3.1
minor
Dependencies (113)
+ 105 more |
|
v3.1.12
patch
3 CVEs
CVE-2026-77459
GO-2026-6784
BIT-argo-cd-2026-77459
GHSA-fmxq-cgp8-87wp
Oct 19, 2026
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References
Updated Oct 20, 2026 · Source: OSV.dev
CVE-2026-55797
GO-2026-6701
BIT-argo-cd-2026-55797
GHSA-j6cw-g6p4-7hch
Oct 19, 2026
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-45738
GO-2026-5418
BIT-argo-cd-2026-45738
GHSA-h98r-wv3h-fr38
Jun 25, 2026
Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Fixed in
3.2.12
3.3.10
3.4.2
Updated Jul 21, 2026 · Source: OSV.dev |
v3.1.12
patch
Dependencies (113)
+ 105 more |
|
v3.0.23
patch
3 CVEs
CVE-2026-77459
GO-2026-6784
BIT-argo-cd-2026-77459
GHSA-fmxq-cgp8-87wp
Oct 19, 2026
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References
Updated Oct 20, 2026 · Source: OSV.dev
CVE-2026-55797
GO-2026-6701
BIT-argo-cd-2026-55797
GHSA-j6cw-g6p4-7hch
Oct 19, 2026
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-45738
GO-2026-5418
BIT-argo-cd-2026-45738
GHSA-h98r-wv3h-fr38
Jun 25, 2026
Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Fixed in
3.2.12
3.3.10
3.4.2
Updated Jul 21, 2026 · Source: OSV.dev |
v3.0.23
patch
Dependencies (112)
+ 104 more |
|
v3.0.22
patch
3 CVEs
CVE-2026-77459
GO-2026-6784
BIT-argo-cd-2026-77459
GHSA-fmxq-cgp8-87wp
Oct 19, 2026
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References
Updated Oct 20, 2026 · Source: OSV.dev
CVE-2026-55797
GO-2026-6701
BIT-argo-cd-2026-55797
GHSA-j6cw-g6p4-7hch
Oct 19, 2026
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Fixed in
3.3.15
3.4.10
3.5.4
3.6.0-rc2
References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-45738
GO-2026-5418
BIT-argo-cd-2026-45738
GHSA-h98r-wv3h-fr38
Jun 25, 2026
Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Fixed in
3.2.12
3.3.10
3.4.2
Updated Jul 21, 2026 · Source: OSV.dev |
v3.0.22
patch
Dependencies (112)
+ 104 more |