Red Hat Red Hat OpenShift GitOps

• CVE-2026-121621 High 8.8 Github.com/argoproj-labs/argocd-image-updater: argocd-image-updater: arbitrary command execution via crafted ssh repository proxy configuration 1.8%
• CVE-2026-14251 High 7.7 Gitops-operator: gitops-operator: missing allowednamespace check in reconcilerhook for clusterrole/role cases enables potential privilege escalation and dos 0.4%
• CVE-2026-15416 High 8.9 Argo-cd: argo cd unauthenticated remote code execution in repo-server via generatemanifest grpc endpoint 0.5%
• CVE-2026-6388 Critical 9.1 Argocd-image-updater: argocd image updater: cross-namespace privilege escalation via insufficient namespace validation 0.4%
• CVE-2025-11065 Medium 5.3 Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure 0.5%
• CVE-2025-13888 Critical 9.1 Openshift-gitops-operator: openshift gitops: namespace admin cluster takeover via privileged jobs 0.7%
• CVE-2024-12401 Medium 4.4 Cert-manager: potential dos when parsing specially crafted pem inputs 0.7%
• CVE-2023-6717 Medium 6.0 Keycloak: xss via assertion consumer service url in saml post-binding flow 0.7%