Is github.com/argoproj/argo-cd/v2 safe to use?

github.com/argoproj/argo-cd/v2 has 6 known vulnerabilities on the latest version (v2.14.21). DepScope rates its health at 40/100 (high risk).

What is the latest version of github.com/argoproj/argo-cd/v2?

The latest version of github.com/argoproj/argo-cd/v2 is v2.14.21, released 2025-11-04.

Does github.com/argoproj/argo-cd/v2 have known vulnerabilities?

Yes. github.com/argoproj/argo-cd/v2 has 6 known vulnerabilities. See depscope.dev/pkg/go/github.com/argoproj/argo-cd/v2 for details.

Is github.com/argoproj/argo-cd/v2 deprecated?

No, github.com/argoproj/argo-cd/v2 is actively maintained. Latest release: v2.14.21 (2025-11-04).

What are alternatives to github.com/argoproj/argo-cd/v2?

DepScope has no curated alternatives for github.com/argoproj/argo-cd/v2 at this time.

What license does github.com/argoproj/argo-cd/v2 use?

github.com/argoproj/argo-cd/v2 is licensed under Apache-2.0.

github.com/argoproj/argo-cd/v2

govv2.14.21

Declarative Continuous Deployment for Kubernetes

License Apache-2.0permissive339 versions1990 maintainers0 deps22,774 weekly dl

argoproj/argo-cd/v2

/ 100

Health

do not use

github.com/argoproj/argo-cd/v2 has critical vulnerabilities — do not use

Update to >= 3.2.0-rc2 to fix known vulnerabilities

Moderate health score (40/100) — verify manually
1 high severity vulnerabilities
2 critical vulnerabilities

Health breakdown0 – 100

25/25

maintenance

10/20

popularity

0/25

security

15/15

maturity

13/15

community

Vulnerabilities

2 critical1 high3 low

Advisories (6)

Severity	ID	Summary	Fixed in
critical	BIT-argo-cd-2025-47933	Argo CD allows cross-site scripting on repositories page	3.0.4
critical	BIT-argo-cd-2025-55190	Argo CD's Project API Token Exposes Repository Credentials	3.1.2
high	CVE-2023-40025	Argo CD web terminal session doesn't expire	2.0.0-20230821201509-e047efa8f951
unknown	BIT-argo-cd-2025-47933	Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd	3.0.4
unknown	BIT-argo-cd-2025-59531	Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd	3.2.0-rc2
unknown	BIT-argo-cd-2025-59537	argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd	3.2.0-rc2

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/go/github.com/argoproj/argo-cd/v2

Last updated · 2025-11-04T14:56:45Z