Vulnerability GO-2026-6784
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
5 hours ago
October 19, 2026 at 09:08 PM UTC
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd
v0.1.0 - v1.8.7
v0.1.0 - v1.8.7
Summary
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd
Details
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
5 hours ago
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd
v3.0.0 - v3.3.14 and v3.4.0 - v3.4.9 and v3.5.0 - v3.5.3 and v3.6.0-rc1 GO-2026-6701
v3.0.0 - v3.3.14 and v3.4.0 - v3.4.9 and v3.5.0 - v3.5.3 and v3.6.0-rc1 GO-2026-6701
Unknown
5 hours ago
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd
v3.0.0 - v3.3.14 and v3.4.0 - v3.4.9 and v3.5.0 - v3.5.3 and v3.6.0-rc1 GO-2026-6701
v3.0.0 - v3.3.14 and v3.4.0 - v3.4.9 and v3.5.0 - v3.5.3 and v3.6.0-rc1 GO-2026-6701
Unknown
5 hours ago
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd
v3.0.0 - v3.3.14 and v3.4.0 - v3.4.9 and v3.5.0 - v3.5.3 and v3.6.0-rc1 GO-2026-6701
v3.0.0 - v3.3.14 and v3.4.0 - v3.4.9 and v3.5.0 - v3.5.3 and v3.6.0-rc1 GO-2026-6701
Critical
4 days ago
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks
v3.0.0 - v3.3.14 and v3.4.0 - v3.4.9 and v3.5.0 - v3.5.3 and v3.6.0-rc1 GHSA-fmxq-cgp8-87wp
v3.0.0 - v3.3.14 and v3.4.0 - v3.4.9 and v3.5.0 - v3.5.3 and v3.6.0-rc1 GHSA-fmxq-cgp8-87wp
Critical
4 days ago
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks
v3.0.0 - v3.3.14 and v3.4.0 - v3.4.9 and v3.5.0 - v3.5.3 and v3.6.0-rc1 GHSA-fmxq-cgp8-87wp
v3.0.0 - v3.3.14 and v3.4.0 - v3.4.9 and v3.5.0 - v3.5.3 and v3.6.0-rc1 GHSA-fmxq-cgp8-87wp
Impacted packages
Timeline
Published
5 hours ago
October 19, 2026 at 09:08 PM UTC
Fixed (v3.6.0-rc2)
13 days ago
October 06, 2026 at 07:00 PM UTC
Fixed (v3.5.4)
13 days ago
October 06, 2026 at 07:58 PM UTC
Fixed (v3.4.10)
13 days ago
October 06, 2026 at 07:59 PM UTC
Fixed (v3.3.15)
13 days ago
October 06, 2026 at 08:03 PM UTC
Last Modified
4 hours ago
October 19, 2026 at 09:31 PM UTC