All vulnerabilities

Servers and applications

CVE-2025-61560

Login failure rate limit can be bypassed via concurrent requests

Severity
High 7.5
Published
7 Oct 2026
Last changed
7 Oct 2026
Added to UpHeron
3 Nov 2026
Fixed in
2.0.0
Also known as
GHSA-4439-h7jw-5cjj
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
Argo CDServers and applications · github:argoproj/argo-cd
  • From 1.5.3 before 2.0.0
  • From 2.0.0 on

References