UpHeron
All vulnerabilities

Servers and applications

CVE-2025-59537

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions 1.2.0 through 1.8.7, 2.0.0-rc1 through 2.14.19, 3.0.0-rc1 through 3.2.0-rc1, 3.1.7 and 3.0.18 are vulnerable to malicious API requests which can crash the API server and cause denial of service to legitimate clients. With the default configuration, no webhook.gogs.secret set, Argo CD’s /api/webhook endpoint will…

Severity
High 7.5
Published
1 Oct 2025
Last changed
12 Oct 2026
Added to UpHeron
1 Nov 2026
Fixed in
2.14.20, 3.0.19, 3.1.8
Sources
NVD

Affected software

SoftwareAffected versions
Argo CDServers and applications · cpe:a:argoproj:argo_cd
  • From 1.2.0 up to 1.8.7
  • From 2.0.0 before 2.14.20
  • From 3.0.0 before 3.0.19
  • From 3.1.0 before 3.1.8
  • Version 3.2.0-rc1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-59537
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-59537