tocsin

Go/github.com/argoproj/argo-cd/v2 CVE-2025-23216: medium 6.8, EPSS 0.47%

Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Action: Upgrade github.com/argoproj/argo-cd/v2 to 2.11.13 or later.

go get github.com/argoproj/argo-cd/v2@v2.11.13
go get github.com/argoproj/argo-cd/v2@v2.12.10
go get github.com/argoproj/argo-cd/v2@v2.13.4

Affected

introducedfixedlast affected
02.11.13-
2.12.02.12.10-
2.13.02.13.4-

Fixed versions

2.11.132.12.102.13.4

Sources

CVE-2025-23216 · published · modified · JSON