CVE-2025-59531 | argoproj argo-cd up to 1.8.7/2.14.19/3.0.18/3.1.7/3.2.0-rc1 /api/webhook repository.links.clone improper check or handling of exceptional conditions (GHSA-f9gq-prrc-hrhc)

October 2, 2025 Yanac

A vulnerability classified as problematic was found in argoproj argo-cd up to 1.8.7/2.14.19/3.0.18/3.1.7/3.2.0-rc1. Affected by this issue is some unknown functionality of the file /api/webhook. Such manipulation of the argument repository.links.clone leads to improper check or handling of exceptional conditions.

This vulnerability is referenced as CVE-2025-59531. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More