Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-43824

Fixed upstream EPSS <1%CVSS 7.7

In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data.

Published 2026-05-02 · CVE record · OSV

Products: argoproj argo-cd, Red Hat Openshift Data Foundation 4, Red Hat OpenShift GitOps

Fixed upstream

Ecosystem	Package	Fixed in
Go	github.com/argoproj/argo-cd	no fix
Go	github.com/argoproj/argo-cd/v2	no fix
Go	github.com/argoproj/argo-cd/v3	3.2.11
Go	github.com/argoproj/argo-cd/v3	3.3.9