Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-47933
9
CRITICALCVSS v3
Published
May 29, 2025
Affected
1 project
Assigned by
GitHub
Severity scale
010
Description
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Prior to versions 2.13.8, 2.14.13, and 3.0.4, an attacker can perform arbitrary actions on behalf of the victim via the API. Due to the improper filtering of URL protocols in the repository page, an attacker can achieve cross-site scripting with permission to edit the repository. This issue has been patched in versions 2.13.8, 2.14.13, and 3.0.4.
argoproj/argo-cd
GitHubDeclarative Continuous Deployment for Kubernetes
GitHubDeclarative Continuous Deployment for Kubernetes>= 1.2.1, < 2.13.8, >= 2.14.0, < 2.14.13, >= 3.0.0, < 3.0.4, = 1.2.0NVD