CVE-2021-26924

6.1 mediumEPSS 0.8%

Medium (6.1) in argoproj argo cd. EPSS 0.8% chance of exploitation in the next 30 days.

An issue was discovered in Argo CD before 1.8.4. Browser XSS protection is not activated due to the missing XSS protection header.

Severity

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2021-03-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19