argoproj github.com/argoproj/gitops-engine vulnerabilities

Latest argoproj github.com/argoproj/gitops-engine CVEs

Newest publication first

1. GHSA-274v-mgcv-cm8j Argo CD GitOps Engine does not scrub secret values from patch errors

   Published 2025-01-30

   Medium·CVSS 6.8

   Impact A vulnerability was discovered in Argo CD that exposed secret values in error messages and the diff view when an invalid Kubernetes Secret resource was synced from a repository. The vulnerability assumes the user has write access to the repository and can exploit it, eithe...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.