CVE security advisories and vulnerability history for argo-cd by argoproj.
59
Total CVEs
Published
0
In CISA KEV
Exploited in the wild
17
Public exploits
PoC or exploit code
7.4
Avg CVSS
2020–2026
Last updated
Overview
argoproj argo-cd has 59 published CVE records since 2020, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 17 have a known public exploit. The average CVSS base score across scored CVEs is 7.4.
This page aggregates every publicly disclosed vulnerability (CVE) affecting argoproj argo-cd, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
Severity and exploitation
How the CVSS severity of argoproj argo-cd's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical15
High18
Medium26
Low0
In CISA’s Known Exploited Vulnerabilities catalog
0
None of argoproj argo-cd's CVEs are currently listed in CISA's KEV catalog.
Public exploits
17
17 of argoproj argo-cd's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every argoproj argo-cd version named in a CVE, then pick one to see only the CVEs that affect it.
Common questions about argoproj argo-cd vulnerabilities.
How many CVEs does argoproj argo-cd have?
argoproj argo-cd has 59 published CVE records since 2020.
How many argoproj argo-cd CVEs are in CISA KEV?
None of argoproj argo-cd's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for argoproj argo-cd vulnerabilities?
Yes — 17 of argoproj argo-cd's CVEs have a known public exploit.
Which versions of argoproj argo-cd are affected?
637 distinct argoproj argo-cd versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in argoproj argo-cd CVEs?
argoproj argo-cd's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-400 (Uncontrolled Resource Consumption), CWE-20 (Improper Input Validation).
How many critical argoproj argo-cd vulnerabilities are there?
argoproj argo-cd has 15 critical and 18 high-severity CVEs.
What is the average severity of argoproj argo-cd CVEs?
The average CVSS base score across argoproj argo-cd's scored CVEs is 7.4.
