VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/argoproj/argo-cd: vulnerability history, versions and safety

github.com/argoproj/argo-cd is a package in the Go ecosystem. Vulert records 76 vulnerabilities for it across 120 releases, from May 2021 to Oct 2026. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
76 vulnerabilities recorded C6 H11 M10 L1 U48
i
55 with no fix published

No patched version yet — these are the ones to plan around.

See the unfixed vulnerabilities →
i
9 in the last 12 months

Most recent disclosure 19 Oct 2026.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/argoproj/argo-cd vulnerabilities

Vulert verdict on github.com/argoproj/argo-cd v1.8.7 i

Updated on 23 Oct 2026

Careful: 55 of the 76 vulnerabilities Vulert records for this package have no fix yet. Plan around those, or apply the workaround listed for each. The rest have a fixed version to move to.

Package health score 65/100
  • Security Unfixed issues
  • Maintenance Sustainable
  • Popularity Key ecosystem project
  • Community Active

What to do: Plan around the 55 vulnerabilities with no published fix: each lists the affected range and any workaround that reduces exposure. No fix yet: Vulert alerts you the moment one is published. Monitor it with Vulert →

  • Current release v1.8.7 — unaffected i
  • Vulnerabilities on record 76 over 5 years · 9 in the last year i
  • Latest disclosure 19 Oct 2026 i
  • Highest CVSS 9.9 i
  • With no published fix 55 i
  • Stars 24,435 i
  • OpenSSF scorecard 9/10 i
  • Last release 12 months ago i
  • Licence Apache-2.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 22 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/argoproj/argo-cd, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.0.0-20250923140542-bcc0243f1ee9 23 Sep 2025 H3 M3 U29 — No Details →
v0.8.1-0.20220628145033-7a3cd61060c2 28 Jun 2022 H3 M3 U29 Apache-2.0 No Details →
v0.8.1-0.20220612193146-5cbb397c935c 12 Jun 2022 H3 M3 U29 Apache-2.0 No Details →
v0.8.1-0.20220311100615-5257a902fb36 11 Mar 2022 H3 M3 U29 Apache-2.0 No Details →
v0.8.1-0.20220222163511-4c6a74642f09 22 Feb 2022 H3 M3 U29 Apache-2.0 No Details →
v0.8.1-0.20220216121147-ab715efd2bf5 16 Feb 2022 H3 M3 U29 Apache-2.0 No Details →
v0.8.1-0.20220210182013-50a693e55402 10 Feb 2022 H3 M3 U29 Apache-2.0 No Details →
v0.0.0-20211006175459-b80f8cdca80d 06 Oct 2021 H3 M3 U29 — No Details →
v0.0.0-20211006175321-80b2016e11ef 06 Oct 2021 H3 M3 U29 — No Details →
v0.0.0-20211001170031-4fd7b93bd523 01 Oct 2021 H3 M3 U29 — No Details →
v1.8.8-0.20210711112059-ebbc1d02f5cd 11 Jul 2021 H3 M3 U29 Apache-2.0 No Details →
v1.8.8-0.20210711111228-9b0631b6c644 11 Jul 2021 H3 M3 U29 Apache-2.0 No Details →
v0.0.0-20210709225554-0311378e7014 09 Jul 2021 H3 M3 U29 — No Details →
v0.0.0-20210709210336-845d11b1f35c 09 Jul 2021 H3 M3 U29 — No Details →
v0.0.0-20210709014543-24b8a7d15c9f 09 Jul 2021 H3 M3 U29 — No Details →
v0.0.0-20210709011221-ea61b8026483 09 Jul 2021 H3 M3 U29 — No Details →
v0.0.0-20210709011135-eced2d6e1672 09 Jul 2021 H3 M3 U29 — No Details →
v0.0.0-20210708103557-87a69d7cae4d 08 Jul 2021 H3 M3 U29 — No Details →
v0.0.0-20210707190921-02a107ea9f85 07 Jul 2021 H3 M3 U29 — No Details →
v0.0.0-20210706101350-d0eef90dd67d 06 Jul 2021 H3 M3 U29 — No Details →
v0.0.0-20210706101243-d3c99b1e26a9 06 Jul 2021 H3 M3 U29 — No Details →
v0.0.0-20210706073835-76aa3cbbf75d 06 Jul 2021 H3 M3 U29 — No Details →
v0.0.0-20210703000329-7e633ba5e936 03 Jul 2021 H3 M3 U29 — No Details →
v0.0.0-20210702211024-b0fe6099e74a 02 Jul 2021 H3 M3 U29 — No Details →
v0.0.0-20210702210129-4feea17dee03 02 Jul 2021 H3 M3 U29 — No Details →
v0.0.0-20210701162712-377e41ea066b 01 Jul 2021 H3 M3 U29 — No Details →
v0.0.0-20210701160452-57ef28121017 01 Jul 2021 H3 M3 U29 — No Details →
v0.0.0-20210701155555-57563ab88026 01 Jul 2021 H3 M3 U29 — No Details →
v0.0.0-20210701155534-11e0202ba0c5 01 Jul 2021 H3 M3 U29 — No Details →
v0.0.0-20210701003014-7e3aba62367c 01 Jul 2021 H3 M3 U29 — No Details →
v0.0.0-20210630214517-60a828730ec5 30 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210629203312-6a87f5f97229 29 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210629164404-67f2882ffa8c 29 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210629145343-c52fe2360e6b 29 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210629145333-128db8bb06ba 29 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210628213047-9032bbae670b 28 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210628212715-a5a40a1e42cb 28 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210628201949-33dbc2a9aded 28 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210628185514-5f143a3e7217 28 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210628164458-c28fa2388f4e 28 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210628060306-35e639db4d56 28 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210625163426-29a01f71f14f 25 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210625094007-1c6a4a02c79b 25 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210624145238-f9f9b2dc4c9d 24 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210623210054-db781794ef11 23 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210623202924-c3bdbde9cd7a 23 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210623192708-7c7fa2c9d9ee 23 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210623175918-3daa22ce6d10 23 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210623174334-e450766ab21c 23 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210623174209-751257d9b055 23 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210623160210-08121c001c41 23 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210623012137-8f5c6ff0e47a 23 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210623011545-a5ddc5e0d3a3 23 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210623002120-45a3f0c9ae7d 23 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210622225037-c24f6fd950ee 22 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210622165859-0410442cfcfd 22 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210622161616-7e7e30a43ff5 22 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210621221038-4da3ca2bdb00 21 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210621203106-a34502cfa58e 21 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210621201911-fc2166ffdf19 21 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210621200150-e11cfb90f4a7 21 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210621103922-59e9a2489198 21 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210617190707-984557e67d45 17 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210617170346-0dab3a15a2c6 17 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210617154956-49d4e1307d19 17 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210616124559-3d5c70671d65 16 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210615192431-3bacd0314ccd 15 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210615163539-8d1c132c6660 15 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210615015454-294a303063c3 15 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210615014536-faea1d1b5055 15 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210612235741-6570c973bfe2 12 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210612195901-2d67ae249a5d 12 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210612083910-1095318a7910 12 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210611074453-a4d518524b6d 11 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210610224836-e5da7cd40d9f 10 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210610203015-0845700e6e30 10 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210610200432-98220d1165d6 10 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210610173624-35de24bd1779 10 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210609171733-cc93fc4b9d03 09 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210609171646-597b4552d215 09 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210609122402-f426d4f7099c 09 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210609032552-22d1c81a9031 09 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210608231135-66e5bd5f0c6d 08 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210608231119-0ab33f6e3cbd 08 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210608223234-b31cc577aab9 08 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210608155819-297668cdeba1 08 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210607191438-28370ed2d08e 07 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210607180330-6bacc4f3dd1c 07 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210606171535-142b041f2ecf 06 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210604231501-479ec430c33d 04 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210604185918-d1eb4e158bb0 04 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210604171203-a384e3ed976f 04 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210604160940-83af1a8c3395 04 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210604160918-e8a6174ec926 04 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210604050742-0c9567194266 04 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210603224222-ed70ebb9a1f5 03 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210603211515-81c92beed791 03 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210603174659-3c4d852210aa 03 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210602223857-e3a3b1d46fc1 02 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210602212536-4d773a648bca 02 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210601184959-6f319165a3c6 01 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210601082222-37eec1c2f3c8 01 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210601003548-91253aef07e4 01 Jun 2021 H3 M3 U29 — No Details →
v0.0.0-20210528232842-d97f5d1487eb 28 May 2021 H3 M3 U29 — No Details →
v0.0.0-20210528170655-056cf955acae 28 May 2021 H3 M3 U29 — No Details →
v0.0.0-20210528152042-6fe5b98729db 28 May 2021 H3 M3 U29 — No Details →
v0.0.0-20210528142629-b31379273636 28 May 2021 H3 M3 U29 — No Details →
v0.0.0-20210527223931-44d92b7bcaf6 27 May 2021 H3 M3 U29 — No Details →
v0.0.0-20210527200306-235c5bcadaee 27 May 2021 H3 M3 U29 — No Details →
v0.0.0-20210527172254-75904ddd1448 27 May 2021 H3 M3 U29 — No Details →
v0.0.0-20210527155737-15c8cde858a1 27 May 2021 H3 M3 U29 — No Details →
v0.0.0-20210527125001-f54ab796cc53 27 May 2021 H3 M3 U29 — No Details →
v0.0.0-20210527064546-70f74f53ad83 27 May 2021 H3 M3 U29 — No Details →
v0.0.0-20210526004020-f76a6a2312b1 26 May 2021 H3 M3 U29 — No Details →
v0.0.0-20210526003929-4dab80d8a2ba 26 May 2021 H3 M3 U29 — No Details →
v0.0.0-20210525192826-50d3f817c564 25 May 2021 H3 M3 U29 — No Details →
v0.0.0-20210525192754-e63fe26d8506 25 May 2021 H3 M3 U29 — No Details →
v0.0.0-20210525174939-0362821293f8 25 May 2021 H3 M3 U29 — No Details →
v0.0.0-20210524200521-e6d54aa7e751 24 May 2021 H3 M3 U29 — No Details →
v0.0.0-20210524175517-52103f3d5381 24 May 2021 H3 M3 U29 — No Details →

The newest 120 of 5,237 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2021 4
  • 2022 11
  • 2023 4
  • 2024 42
  • 2025 10
  • 2026 5

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 9 of the 76 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/argoproj/argo-cd

The 5 most severe of 76 vulnerabilities recorded for this package

Search all 76 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2022-24768: Improper access control allows admin privilege escalation in Argo CD 9.9 critical 2.1.14 24 Mar 2022
CVE-2023-23947: Argo CD - Improper Authorization Allows Unauthorized Cluster Secret Updates 9.1 critical 2.3.17 16 Feb 2023
CVE-2023-22482: Argo CD JWT Audience Claim Verification Bypass 9.0 critical 2.3.14 25 Jan 2023
CVE-2025-47933: Argo CD Cross-Site Scripting Vulnerability on Repositories Page 9.0 critical No fix published 28 May 2025
CVE-2024-28175: Cross-site scripting on application summary component in Argo CD 9.0 critical No fix published 15 Mar 2024

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/argoproj/argo-cd

Is github.com/argoproj/argo-cd safe to use?

Vulert records 76 vulnerabilities for github.com/argoproj/argo-cd in Go: 6 critical, 11 high, 10 medium and 1 low, plus 48 not yet rated. 55 of them have no published fix yet, so those are the ones to avoid or mitigate.

What is github.com/argoproj/argo-cd's Vulert package health score?

Vulert scores github.com/argoproj/argo-cd 65/100, which reads as usable, but worth attention. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

How many vulnerabilities does github.com/argoproj/argo-cd have?

76 vulnerabilities are recorded for github.com/argoproj/argo-cd in the Go ecosystem: 6 critical, 11 high, 10 medium and 1 low, plus 48 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/argoproj/argo-cd vulnerabilities disclosed?

9 vulnerabilities were recorded for github.com/argoproj/argo-cd in the last 12 months, and the oldest entry in this database dates to 21 May 2021. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/argoproj/argo-cd are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/argoproj/argo-cd for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/argoproj/argo-cd version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.