Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. In versions 2.13.0 through 2.13.8, 2.14.0 through 2.14.15, 3.0.0 through 3.0.12 and 3.1.0-rc1 through 3.1.1, API tokens with project-level permissions are able to ret…
Exact source revision recorded 7 Nov 2026 02:40:20 UTC. It does not establish the source's current position. Latest evidence.
euvd · EUVD-2025-26875
PublishedEUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON.
Original publisher date fields
datePublished: Sep 4, 2025, 10:37:52 PM
dateUpdated: Sep 5, 2025, 4:07:25 PM
8 related source bulletins · separate from aliases
RHSA-2025:15389: Red Hat Security Advisory: Red Hat OpenShift GitOps security update
CVE-2025-55190
RHSA-2025:15387: Red Hat Security Advisory: Red Hat OpenShift GitOps security update
CVE-2025-55190
WID-SEC-W-2025-1978: Red Hat OpenShift GitOps (Argo CD): Schwachstelle ermöglicht Offenlegung von Informationen
CVE-2025-55190
RHSA-2025:15388: Red Hat Security Advisory: Red Hat OpenShift GitOps security update
CVE-2025-55190
RHSA-2026:1017: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.18.3 security update
CVE-2025-13888 · CVE-2025-47913 · CVE-2025-55190 · CVE-2025-58183 · CVE-2025-61729 · CVE-2025-68156
RHSA-2026:1488: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.19.1 security update
CVE-2025-55190 · CVE-2025-58183
openSUSE-SU-2025:15538-1: govulncheck-vulndb-0.0.20250908T141310-1.1 on GA media
CVE-2024-52284 · CVE-2024-58259 · CVE-2025-51667 · CVE-2025-53884 · CVE-2025-54467 · CVE-2025-55190 · CVE-2025-56760 · CVE-2025-56761 · CVE-2025-58355 · CVE-2025-6203 · CVE-2025-8077 · CVE-2025-9566
RHSA-2026:1018: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.17.4 security update
CVE-2025-47913 · CVE-2025-55190 · CVE-2025-58183 · CVE-2025-58754 · CVE-2025-61729 · CVE-2025-68156
No normalized affected-package data is projected for this source revision. The original publisher record may contain additional product and version evidence; this does not establish that a package is unaffected.
Original source record · Cite this exact observation · Complete original publisher JSON