TI-2026-70041 CVE-2026-55797 · GHSA-j6cw-g6p4-7hch
Command injection in Argo CD repo-server via SSH repository proxy URL
Priority MEDIUM 44
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.
RHSA-2026:77267
Red Hat OpenShift GitOps v1.22.1 security update
Released 2026-10-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift GitOps 1.22 registry.redhat.io/openshift-gitops-1/argocd-rhel9, registry.redhat.io/openshift-gitops-1/dex-rhel9
Fixes 4 records
TI-2026-71916 CVE-2026-77459 · GHSA-fmxq-cgp8-87wp
Argo CD delete hooks bypass AppProject resource restrictions
Priority MEDIUM 43
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.
TI-2026-26189 CVE-2026-33818 · GHSA-xc2p-8ggw-6cr5
Enforce maximum recursion depth in encoding/asn1
Priority MEDIUM 40
Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures.
TI-2025-43897 CVE-2025-61560
Argo CD SessionManager race condition allows rate limit bypass and brute force
Priority LOW 37
A race condition vulnerability in the SessionManager of CNCF: Cloud Native Computing Foundation Argo CD v3.0.6 allows attackers to bypass rate limiting and perform a brute force attack via repeated crafted requests.