Cpe:2.3:a:cloud_native_computing_foundation:argo_cd:*:*:*:*:*:*:*:*

Argo CD versions 2.1.0 through 3.6.0-rc1 are vulnerable to arbitrary code execution if --enable-helm is used, allowing attackers to inject a malicious Helm plugin via repository-controlled configuration.