# Argo CD v2.2.11 — Release & Upgrade Intelligence
- **Product:** Argo CD (https://argo-cd.readthedocs.io)
- **Version:** v2.2.11
- **Released:** Jul 12, 2022
- **Impact Score:** 7/10
- **Breaking Changes:** Source flagged
- **Canonical Analysis:** https://changelogs.us/argocd/updates/v2.2.11/

## Executive Summary (TL;DR)
Argo CD v2.2.11. Source highlight: kubectl create namespace argocd

## Breaking Changes & Deprecations
- Potentially-breaking changes The fix for GHSA-7943-82jg-wmw5 enables TLS certificate validation by default for connections to OIDC providers. If

## New Features
- feat: enable specifying root ca for oidc (#6712)

## Bug Fixes
- HIGH: Certificate verification is skipped for connections to OIDC providers (GHSA-7943-82jg-wmw5)
- LOW: A leaked API server encryption key can allow XSS for SSO users (GHSA-pmjg-52h9-72qv)
- fix: webhook typo in case of error in GetManifests (#9671)