Known vulnerabilities in Argo CD

Vendor: Argo
Software: Argo CD
Software CPE: cpe:2.3:a:argo:argo-cd:*:*:*:*:*:kubernetes:*:*
Total vulnerabilities: 68
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Argo CD Argo CD is affected by 68 known vulnerabilities: 6 high, 34 medium, 28 low Critical High Medium Low

Vulnerabilities (68)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131761 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-45738
CWE-79 Low
No
No
3.2.12, 3.3.10, 3.4.2 18.05.2026 SB2026051897
#VU131760 - Improper Removal of Sensitive Information Before Storage or Transfer
CVE-2026-45737
CWE-212 Low
No
No
3.2.12, 3.3.10, 3.4.2 18.05.2026 SB2026051897
#VU129014 - Improper input validation
CVE-2025-59537
CWE-20 Medium
No
No
2.14.20, 3.0.19, 3.1.8 02.05.2026 SB20260502154
#VU129012 - Improper Check or Handling of Exceptional Conditions
CVE-2025-59531
CWE-703 Medium
No
No
2.14.20, 3.0.19, 3.1.8 02.05.2026 SB20260502154
#VU129011 - Improper Removal of Sensitive Information Before Storage or Transfer
CVE-2026-43824
CWE-212 Medium
No
No
3.2.11, 3.3.9 02.05.2026 SB20260502155
#VU129009 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-55191
CWE-362 Low
No
No
2.14.20, 3.0.19, 3.1.8 02.05.2026 SB20260502154
#VU129008 - Uncaught Exception
CVE-2025-59538
CWE-248 Medium
No
No
2.14.20, 3.0.19, 3.1.8 02.05.2026 SB20260502154
#VU114886 - Exposure of sensitive information to an unauthorized actor
CVE-2025-55190
CWE-200 Medium
No
No
2.13.9, 2.14.16, 3.0.14, 3.1.2 05.09.2025 SB2025090543
SB2026021732
SB2026021733
#VU109950 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-47933
CWE-79 Low
No
No
2.13.8, 2.14.13, 3.0.4 29.05.2025 SB20250529128
#VU129007 - Information Exposure Through Log Files
CVE-2025-23216
CWE-532 Low
No
No
2.11.13, 2.12.10, 2.13.4 30.01.2025 SB2025013065
#VU100921 - Incorrect Regular Expression
CVE-2024-21538
CWE-185 Medium
No
No
2.12.9 26.11.2024 SB2024112627
SB2024112629
SB2024120325
and 67 more
#VU98132 - Inefficient Regular Expression Complexity
CVE-2024-45296
CWE-1333 Low
No
No
2.10.17, 2.11.9, 2.12.4 08.10.2024 SB2024100822
SB2024100823
SB2024100826
and 87 more
#VU97768 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43799
CWE-79 Low
No
No
2.11.11 30.09.2024 SB2024093022
SB2024100824
SB2024100825
and 50 more
#VU129006 - Improper Access Control
CVE-2024-41666
CWE-284 Low
No
No
2.9.21, 2.10.16, 2.11.7 24.07.2024 SB2024072445
#VU94676 - Resource exhaustion
CVE-2024-40634
CWE-400 Medium
No
No
2.9.20, 2.10.15, 2.11.6 23.07.2024 SB2024072331
SB2024072701
SB2024080205
and 1 more
#VU129004 - Missing Authentication for Critical Function
CVE-2024-37152
CWE-306 Medium
No
No
2.9.17, 2.10.12, 2.11.3 06.06.2024 SB2024060643
#VU129005 - Exposure of sensitive information to an unauthorized actor
CVE-2024-36106
CWE-200 Low
No
No
2.9.17, 2.10.12, 2.11.3 06.06.2024 SB2024060643
#VU129013 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2024-31989
CWE-327 Medium
No
No
2.8.19, 2.9.15, 2.10.10, 2.11.1 21.05.2024 SB2024052149
SB20240611291
SB20240611292
and 1 more
#VU89045 - Improper input validation
CVE-2024-32476
CWE-20 Medium
No
No
2.8.17, 2.9.13, 2.10.8 29.04.2024 SB2024042924
#VU89009 - Resource exhaustion
CVE-2024-29893
CWE-400 Medium
No
No
2.8.14, 2.9.10, 2.10.5 25.04.2024 SB2024042557
SB2024042564
SB2024042565
and 2 more


Showing elements 1 - 20 out of 68