Fluid Attacks Database

Description

Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
go	github.com/argoproj/argo-cd	-	-
go	github.com/argoproj/argo-cd/v2	>=2.1.0 <2.14.20	2.14.20
go	github.com/argoproj/argo-cd/v3	=3.2.0-rc1 \|\| >=3.2.0-rc1 <3.2.0-rc2 \|\| >=3.1.0-rc1 <3.1.8 \|\| >=3.0.0-rc1 <3.0.19	3.2.0-rc2, 3.1.8, 3.0.19

Aliases

1. CVE-2025-551912. NVD-2025-551913. OSV-GO-2025-39944. OSV-2025-551915. GHSA-g88p-r42r-ppp96. GCVE-2025-551917. GHSA-g88p-r42r-ppp9

References

1. https://github.com/argoproj/argo-cd/commit/701bc50d01c752cad96185f848088d287a97c7b72. https://github.com/argoproj/argo-cd/pull/61033. https://github.com/argoproj/argo-cd/security/advisories/GHSA-g88p-r42r-ppp94. https://pkg.go.dev/vuln/GO-2025-3994