UpHeron
All vulnerabilities

Servers and applications

CVE-2025-55191

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions between 2.1.0 and 2.14.19, 3.2.0-rc1, 3.1.0-rc1 through 3.1.7, and 3.0.0-rc1 through 3.0.18 contain a race condition in the repository credentials handler that can cause the Argo CD server to panic and crash when concurrent operations are performed on the same repository URL. The vulnerability is located in…

Severity
Medium 5.3
Published
30 Sept 2025
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
2.14.20, 3.0.19, 3.1.8
Sources
NVD

Affected software

SoftwareAffected versions
Argo CDServers and applications · cpe:a:argoproj:argo_cd
  • From 2.1.0 before 2.14.20
  • From 3.0.0 before 3.0.19
  • From 3.1.0 before 3.1.8
  • Version 3.2.0-rc1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-55191
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-55191