{"schema_version":"1.3.1","id":"GO-2025-3720","modified":"2025-05-29T20:59:03Z","published":"2025-05-29T20:59:03Z","aliases":["CVE-2025-47933","GHSA-2hj5-g64g-fp6p"],"summary":"Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd","details":"Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd","affected":[{"package":{"name":"github.com/argoproj/argo-cd","ecosystem":"Go"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.2.0-rc1"}]}],"ecosystem_specific":{}},{"package":{"name":"github.com/argoproj/argo-cd/v2","ecosystem":"Go"},"ranges":[{"type":"SEMVER","events":[{"introduced":"2.0.0-rc3"},{"fixed":"2.13.8"},{"introduced":"2.14.0-rc1"},{"fixed":"2.14.13"}]}],"ecosystem_specific":{}},{"package":{"name":"github.com/argoproj/argo-cd/v3","ecosystem":"Go"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.0.4"}]}],"ecosystem_specific":{}}],"references":[{"type":"ADVISORY","url":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-2hj5-g64g-fp6p"},{"type":"FIX","url":"https://github.com/argoproj/argo-cd/commit/a5b4041a79c54bc7b3d090805d070bcdb9a9e4d1"}],"database_specific":{"url":"https://pkg.go.dev/vuln/GO-2025-3720","review_status":"UNREVIEWED"}}