Go/github.com/argoproj/argo-cd CVE-2026-42880, CVE-2026-43824: unknown

ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction in github.com/argoproj/argo-cd

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-5099
• https://github.com/argoproj/argo-cd/security/advisories/GHSA-3v3m-wc6v-x4x3
• https://nvd.nist.gov/vuln/detail/CVE-2026-42880

CVE-2026-42880, CVE-2026-43824 · published 2026-06-25T18:26:48Z · modified 2026-07-08T08:11:34.582855972Z · JSON