Argo CD: 2.4.28 → 2.14.20
Argo Project · upgrade impact · Official site ↗
Fixed by upgrading to 2.14.20 iVulnerabilities that affect 2.4.28 but no longer affect 2.14.20 — the security gain from this upgrade, by exploited status then exploitation probability.
Exploited first, then by exploitation probability (EPSS).
CVE-2025-55190 CRITICAL EPSS 5% ✓ cleared in 2.14.20 CVE-2024-31989 CRITICAL EPSS 1% ✓ cleared in 2.14.20 CVE-2024-40634 HIGH EPSS 1% ✓ cleared in 2.14.20 CVE-2024-21661 HIGH EPSS 1% ✓ cleared in 2.14.20 CVE-2023-40584 MEDIUM EPSS 1% ✓ cleared in 2.14.20 CVE-2024-32476 MEDIUM EPSS 1% ✓ cleared in 2.14.20 CVE-2023-40029 CRITICAL EPSS 1% ✓ cleared in 2.14.20 CVE-2024-29893 MEDIUM EPSS 1% ✓ cleared in 2.14.20 CVE-2024-21662 HIGH EPSS 1% ✓ cleared in 2.14.20 CVE-2024-21652 CRITICAL EPSS 1% ✓ cleared in 2.14.20 CVE-2024-28175 CRITICAL EPSS 1% ✓ cleared in 2.14.20 CVE-2025-59537 HIGH EPSS 1% ✓ cleared in 2.14.20 CVE-2025-59531 HIGH EPSS 1% ✓ cleared in 2.14.20 CVE-2023-50726 MEDIUM EPSS 1% ✓ cleared in 2.14.20 CVE-2024-31990 MEDIUM EPSS 0% ✓ cleared in 2.14.20 CVE-2025-23216 MEDIUM EPSS 0% ✓ cleared in 2.14.20 CVE-2025-55191 MEDIUM EPSS 0% ✓ cleared in 2.14.20 CVE-2024-36106 MEDIUM EPSS 0% ✓ cleared in 2.14.20 CVE-2025-47933 CRITICAL EPSS 0% ✓ cleared in 2.14.20