See image-updater github security page: https://github.com/argoproj-labs/argocd-image-updater/security/dependabot

• Kubernetes GitRepo Volume Inadvertent Local Repository Access https://github.com/argoproj-labs/argocd-image-updater/security/dependabot/104
• Kubernetes allows Command Injection affecting Windows nodes via nodes/*/logs/query API https://github.com/argoproj-labs/argocd-image-updater/security/dependabot/103
• Node Denial of Service via kubelet Checkpoint API https://github.com/argoproj-labs/argocd-image-updater/security/dependabot/98

argo-cd project already has the patched version: k8s.io/kubernetes v1.32.2

When upgrading, make sure the related replace entries are also updated and perserved in go.mod.