tocsin

Go/github.com/argoproj/argo-cd/v2 CVE-2025-55190: critical 9.9, EPSS 5.66%

Argo CD's Project API Token Exposes Repository Credentials

Action: Upgrade github.com/argoproj/argo-cd/v2 to 2.13.9 or later.

go get github.com/argoproj/argo-cd/v2@v2.13.9
go get github.com/argoproj/argo-cd/v2@v2.14.16

Affected

introducedfixedlast affected
2.13.02.13.9-
2.14.02.14.16-

Fixed versions

2.13.92.14.16

Sources

CVE-2025-55190 · published · modified · JSON