How many argoproj argo-cd CVEs are in CISA KEV?

None of argoproj argo-cd's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of argoproj argo-cd are affected?

741 distinct argoproj argo-cd versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in argoproj argo-cd CVEs?

argoproj argo-cd's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-400 (Uncontrolled Resource Consumption), CWE-863 (Incorrect Authorization).

How many critical argoproj argo-cd vulnerabilities are there?

argoproj argo-cd has 16 critical and 19 high-severity CVEs.

What is the average severity of argoproj argo-cd CVEs?

The average CVSS base score across argoproj argo-cd's scored CVEs is 7.5.

argoproj argo-cd Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: argoproj argo-cd vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

argoproj argo-cd Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

argoproj argo-cd has 61 published CVE records since 2020, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 23 have a known public exploit. The average CVSS base score across scored CVEs is 7.5.

Severity and exploitation

How the CVSS severity of argoproj argo-cd's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical16

High19

Medium26

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of argoproj argo-cd's CVEs are currently listed in CISA's KEV catalog.

Public exploits

23 of argoproj argo-cd's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every argoproj argo-cd version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

0.7.030 CVEs
0.7.130 CVEs
0.8.030 CVEs
0.5.028 CVEs
0.5.128 CVEs
0.5.228 CVEs
0.6.028 CVEs
0.6.128 CVEs
0.4.025 CVEs
0.4.125 CVEs
0.4.225 CVEs
0.4.325 CVEs

Common weakness types

The CWE weakness categories most often found in argoproj argo-cd CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many argoproj argo-cd CVEs were published each year.

2020

2021

2022

2023

2024

2025

2026

Other argoproj products

Browse vulnerabilities for other products by argoproj.

argo cd58 CVEs github.com/argoproj/argo-cd/v251 CVEs github.com/argoproj/argo-cd49 CVEs argo workflows18 CVEs argo-workflows18 CVEs github.com/argoproj/argo-workflows/v317 CVEs github.com/argoproj/argo-workflows16 CVEs

Frequently asked questions

Common questions about argoproj argo-cd vulnerabilities.

How many CVEs does argoproj argo-cd have?: argoproj argo-cd has 61 published CVE records since 2020.
How many argoproj argo-cd CVEs are in CISA KEV?: None of argoproj argo-cd's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for argoproj argo-cd vulnerabilities?: Yes — 23 of argoproj argo-cd's CVEs have a known public exploit.
Which versions of argoproj argo-cd are affected?: 741 distinct argoproj argo-cd versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in argoproj argo-cd CVEs?: argoproj argo-cd's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-400 (Uncontrolled Resource Consumption), CWE-863 (Incorrect Authorization).
How many critical argoproj argo-cd vulnerabilities are there?: argoproj argo-cd has 16 critical and 19 high-severity CVEs.
What is the average severity of argoproj argo-cd CVEs?: The average CVSS base score across argoproj argo-cd's scored CVEs is 7.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track argoproj argo-cd vulnerabilities

Get an alert for each new argoproj argo-cd CVE, with AI-written analysis and remediation steps.

Create an account See pricing

Fixed in

1287d24bfe47bcaa6e791e5ff12fa1c1bf57a4424 CVEs
132be88e674fbdb222e38f9a15edb5b512904cd94 CVEs
2.14.204 CVEs
3.0.194 CVEs
3.1.84 CVEs
879895af786513ae25ba22f36f861cc1afe3b4354 CVEs
8db0e57b738ff5b0b276031573576fdc3498c04f4 CVEs
903db5fe464032bd5a10bf32fe17639e76634c2a4 CVEs
becb020064fe9be5381bf6e5818ff8587ca8f3774 CVEs
1.5.03 CVEs
2.10.43 CVEs
231e359c22b5cc8f09794f35d92b5d2af00536bf3 CVEs
28aea3dfdede00443b52cc584814d80e8f8962003 CVEs
38755a4c1e5232aa2e6f80c062593c9f07da07573 CVEs
52e6025f8b565705025d029e8bed36d6caa5ecf73 CVEs
52f917a18165416baa418822daae36c5f011e91f3 CVEs
602df423e0d1be0e71eb204293d91969dfb77c8a3 CVEs
8281b18831b585ccbed840a85fe695eb23f07f623 CVEs
973eccee0af7f3096e7c56b1ba7c9a8601e077c43 CVEs
ac8b7df9467ffcc0920b826c62c4b603a7bfed243 CVEs
f5d63a5c77d2e804e51ef94bee3db441e0789d003 CVEs
fe427802293b090f43f91f5839393174df6c3b3a3 CVEs
0232073ccffa0348f633a8a1fce0b55c3a56a6882 CVEs
0badce7840e3fdb9f6d94e13488bec358fd0472d2 CVEs
0dc6b1b57dd5bb925d5b03c3d09419ab9fb4225e2 CVEs
0fd6344537eb948cff602824a1d060421ceff40e2 CVEs
1966269fdc1c334a7769bd50341cf4d53490142d2 CVEs
1b1bb48f981385cf40b282e965cf63419be3d93f2 CVEs
2.10.32 CVEs
2.11.32 CVEs
2.6.152 CVEs
2.7.142 CVEs
2.8.132 CVEs
2.8.32 CVEs
2.9.92 CVEs
2e550c3f0723daf94df7343b7c40f459aafd6fff2 CVEs
2f7922be9c8f364fec435eec4860b49279be77da2 CVEs
3.2.112 CVEs
3.3.92 CVEs
39ec73e12a14e1fd20dd10d4bb67fb0af2de867c2 CVEs
3f344d54a4e0bbbb4313e1c19cfe1e544b1625982 CVEs
4e8d8b5d05451d76412b36122d6803a90b4f406e2 CVEs
6d66c1b29e4f25dccfb5b0c7a939785b0071ef9a2 CVEs
71136160855ae4893ca4b983b30a9a6db68037f12 CVEs
759bd2888d413b4f6b6027489627fa82d15d48d82 CVEs
77556d9e64304c27c718bb0794676713628e435e2 CVEs
a40c95a6383baa0d9f670586a5c295021f59337c2 CVEs
bdda41046378a855e289b5f1602d5c923a3f914a2 CVEs
cb6f5ac8b8c08ce26cce08b8a1bd2144034bd79b2 CVEs
e25d3b54354dc529a11a1ccbb19f6338aa0275252 CVEs
00f83c41dcfd879f34f8e0248c860d704b41cf0f1 CVE
089247df0f15e64813d00a2d1271a2095feecad41 CVE
0895ebc1352bd631cd3f74ef65347136b5287e521 CVE
0ba9817cc2cfe31668e734ee8c2d4a7c132ce3b01 CVE
1.7.121 CVE
1.7.131 CVE
1.7.141 CVE
1.8.41 CVE
1.8.61 CVE
1.8.71 CVE
102853d31a22e2031ad76bdc0b673d61c7c2cd891 CVE
1149cdc6e932208c4402183cc3d7b7485239940c1 CVE
14963d7facc63320d16ba2440f8deb476c0d1cf01 CVE
1804306f9472d19996f6340b55139b21982156ad1 CVE
1b025d2eaa40a20059a89ee80bf191626548fe8c1 CVE
2.10.151 CVE
2.10.161 CVE
2.10.51 CVE
2.10.71 CVE
2.10.81 CVE
2.11.11 CVE
2.11.61 CVE
2.11.71 CVE
2.13.41 CVE
2.13.81 CVE
2.13.91 CVE
2.14.131 CVE
2.14.161 CVE
2.8.121 CVE
2.9.201 CVE
2.9.211 CVE
2.9.81 CVE
212d320363c8e72376016ab175a8cebe9030646c1 CVE
2bb617d02a7d888acaa3544862d3d174ea5108161 CVE
2de6920da4eb8be2c0db13e2b5b185a2dd411fe51 CVE
3.0.141 CVE
3.0.41 CVE
3.1.21 CVE
31ffe657c4f15d3c0df8223d286043ff70da74f01 CVE
335875d13e018bed6e03873f47425825829647451 CVE
35a7350b7444bcaf53ee0bb11b9d8e3ae4b717a11 CVE
35ea43c537d6e8948e67f347317fc4f88b3251221 CVE
37b1cf5306f9c245f188c4c0566c23a0f80cdc651 CVE
3bf801f2dfe666bccdb0b40fa6e24e8d4b0087d61 CVE
3f143c9307f99a61bf7049a2b1c7194699a7c21b1 CVE
4bc8085b0a6d2296b849539d3d09fc7be7a4a5111 CVE
5328bd58e6255e31c858cc1b628552d32bd105e01 CVE
58c8bc04d3f14568d817cd9e3a525f313c295c011 CVE
598f79236ae4160325b37342434baef4ff95d61c1 CVE
59db3998e26c1fa98ba0418196763f0e62d919641 CVE
5a4ef23d96676d13e991ce970d88ba868728ff891 CVE
5ad281ef56a7ff11aab743ab004a470bf3ecf08c1 CVE
5bcd846fa16e4b19d8f477de7da50ec0aef320e51 CVE
5c51d5dae0a8c8940979db3eff5cc6be7bff92501 CVE
612d345cd926d0b05d1755e3e0717b01ccd207401 CVE
66a8905181ad49a4cd0982644815fb8ee626fdfe1 CVE
685040cf82178b1e5732bf2b839312ff0f9d6ef21 CVE
6c2db334e9540279717c9dd91dda5a93cd466cfe1 CVE
6dbbb18aa963a0c9e608fcfeab4065c6fb46f8cb1 CVE
6dd79895e248cc0980bcaf6c6bafdc9afbbf80cb1 CVE
6e02f8b23201b0620a4ff1bce5d38229ba1eb02e1 CVE
76ed3d6d720ada699980d6b04a5122f90e02bd361 CVE
7879e6322465080a82d152bf00f2b92e0f36c6581 CVE
78d749ec88bea5a5e851fc48b9404fdf067192b61 CVE
791b036d983452402ed4aa0c96a7a9d47842871c1 CVE
7f0a05834b05103d69d7c150e1ee36541b3146961 CVE
836cde06baef111fa2d7fe157de5c199b16bcd2b1 CVE
84fbc930161f29ebe45a7da3b2e81ee256d119c21 CVE
8544bef56b8bee19e73a71b2d10ccd64156dd72c1 CVE
87e9148320749693624d08e3d6fa2cc217c672a01 CVE
92b02379b980da45c6b9249f56e1114f294f2d8e1 CVE
9324949efc3a07f4b4b4e23c2344ee764acf92591 CVE
93d588c86e9740a5df3e5379a07593de28da0d1a1 CVE
98203002baea3cfc2776f17088232070cea1515c1 CVE
9db2c9471f6ff599c3f630b446e940d3a065620b1 CVE
9f40df0c29eca7e45a73f802f033dfd1ed0068e31 CVE
a5ae7bd16143814dc8560da0e476905ed1d466281 CVE
a70b2293a06be06dbb5fb30d0925331e72a6de141 CVE
a7d718da2e77e6fe9e3d58cd788b5cdaa6b215fe1 CVE
aa3f3749f8d5f174d2e4cdd2cf14cf6f9ef551431 CVE
ac11bec9986807adc8886ef1181eced7347ef5c61 CVE
b060053b099b4c81c1e635839a309c9c8c1863e91 CVE
b5bdef0d0657089cae4846e9596dca96b08312e61 CVE
bb06722d980611a11098bc3eec00c80ea7c2261e1 CVE
bbe870ff5904dd1cebeba6c5dcb7129ce7c2b5e21 CVE
bc51fa16de64271ba7aa973af94479e87b5798991 CVE
bcb4298afc9fcff5f5d69f4e1db2d0a75983f42c1 CVE
c8df5ff7acc403adcee1256da5d87081cd52f0a61 CVE
d16bc2610b9b7f51154851d994a556f5bb0ede431 CVE
d5dd7019ee65be8895133fe4df554e28074242c41 CVE
d6cb4e903f1802efff15682ef0ceddb1e1e69f971 CVE
d6d5b248ce00e1a2c512068002a93d33197670871 CVE
e4a0246c4d920bc1e5ee5f9048a99eca7e1d53cb1 CVE
e51d0b3224038e9c38450672173774767e9a5b711 CVE
e86cf5d7057ea465dab04fdfc16621505a33ad2d1 CVE
eb3d1fb84b9b77cdffd70b14c4f949f1c64a94161 CVE
eb7b8a47908e01f032a29a16eae782dac67026381 CVE
ecc2af9dcaa12975e654cde8cbbeaffbb315f75c1 CVE
f2ae45b10a7d0642e1cb0d2f003dad41571363391 CVE
f5b0db240b4e3abf18e97f6fd99096b4f9e94dc51 CVE
f922b44b5d17765910e31a583dfb253d75afebe61 CVE

argoproj argo-cd Vulnerabilities