Argoproj Argo Cd vulnerabilities
57 published vulnerabilities in Argoproj Argo Cd. The most were published in 2022 (14), and 3 so far in 2026.
Argoproj Argo Cd vulnerabilities by year
2018
2020
2021
2022
2023
2024
2025
2026
Most exploited Argoproj Argo Cd vulnerabilities
- CVE-2025-55190 Argo CD: Project API Token Exposes Repository Credentials
- CVE-2022-29165 Argo CD will blindly trust JWT claims if anonymous access is enabled
- CVE-2023-40029 Cluster secret might leak in cluster details page in Argo CD
- CVE-2022-24768 Improper access control allows admin privilege escalation in Argo CD
- CVE-2024-21652 Argo CD vulnerable to Bypassing of Brute Force Protection via Application Crash and In-Memory Data Loss
- CVE-2026-42880 ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction
- CVE-2025-47933 Argo CD allows cross-site scripting on repositories page
- CVE-2024-31989 ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache
- CVE-2024-28175 Cross-site scripting on application summary component in argo-cd
- CVE-2023-23947 Argo CD users with any cluster secret update access may update out-of-bounds cluster secrets
- CVE-2023-22482 JWT audience claim is not verified
- CVE-2022-31035 External URLs for Deployments can include javascript in argo-cd
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.