Is Argo CD 2.12.13 patched?
Current stable (3.4.3): 100/100
2.12.13 has 5 open critical-or-high vulnerabilities. Run 2.14.20 or later to clear them. See what 2.14.20 fixes →
Summary iPlain-English security status for Argo CD 2.12.13, built from its CVEs, active-exploitation data, end-of-life date and latest release.
Argo CD 2.12.13 is part of the 2.12 release line. 6 known vulnerabilities affect it. The minimum safe version is 2.14.20 — upgrade to it or later to clear the open critical/high issues. The 2.12 line reached end-of-life on 2025-05-06, so it no longer receives security patches. The latest supported Argo CD release is 3.4.3.
Known issues affecting 2.12.13
Exploited first, then by exploitation probability.
CVE-2025-55190 CRITICAL EPSS 5% → fixed in 3.1.2 CVE-2025-59537 HIGH EPSS 1% → fixed in 3.1.8 CVE-2025-59531 HIGH EPSS 1% → fixed in 3.1.8 CVE-2025-59538 HIGH EPSS 1% → fixed in 3.1.8 CVE-2025-55191 MEDIUM EPSS 0% → fixed in 3.1.8 CVE-2025-47933 CRITICAL EPSS 0% → fixed in 3.0.4Other Argo CD versions
Check another release line of Argo CD.
Frequently asked
Is Argo CD 2.12.13 patched?
Argo CD 2.12.13 is end-of-life and no longer receives security patches. Move to 3.4.3.
What version should I upgrade Argo CD 2.12.13 to?
Upgrade Argo CD 2.12.13 to at least 2.14.20 to clear its 5 open critical-or-high vulnerabilities.
When does Argo CD 2.12 reach end-of-life?
Argo CD 2.12 reached end-of-life on 2025-05-06 and no longer receives security patches.
What is the latest version of Argo CD?
The latest supported Argo CD release is 3.4.3.
Is Argo CD 2.12.13 still receiving security updates?
No — Argo CD 2.12.13 is on the 2.12 line, which reached end-of-life on 2025-05-06 and no longer receives security updates. Upgrade to 3.4.3 or later to stay supported.
Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Argo Project's official advisory before you patch or upgrade — Argo CD official site ↗