tocsin

Go/github.com/argoproj/argo-cd/v3 CVE-2026-45738: high 7.3, EPSS 0.61%

Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation

Action: Upgrade github.com/argoproj/argo-cd/v3 to 3.2.12 or later.

go get github.com/argoproj/argo-cd/v3@v3.2.12
go get github.com/argoproj/argo-cd/v3@v3.3.10
go get github.com/argoproj/argo-cd/v3@v3.4.2

Affected

introducedfixedlast affected
03.2.12-
3.3.0-rc13.3.10-
3.4.0-rc13.4.2-

Fixed versions

3.2.123.3.103.4.2

Sources

CVE-2026-45738 · published · modified · JSON