Argo CD Unauthenticated Access to sensitive setting

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. The vulnerability allows unauthorized access to the sensitive settings exposed by /api/v1/settings endpoint without authentication. All sensitive settings are hidden except passwordPattern. id: CVE-2024-37152 info: name: Ar...

GO-2026-4942 vulnerabilities

Vulnerabilities for packages: envoy-gateway, argocd-image-updater, gitness, zot, kots, portieris...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: apisix-ingress-controller, cluster-api-aws-controller, rke2-cloud-provider, rancher-webhook, kubescape-operator, tekton-chains, kube-vip-cloud-provider, istio, kubernetes-csi-external-attacher, cass-operator, calico, spqr, opentelemetry-operator,...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: helm-operator, ratify, rancher-fleet, gatekeeper, headlamp-fips, crossplane-fips, kgateway, envoy-gateway-fips, rancher-fleet-fips, drone-fips, chartmuseum, kube-arangodb, argocd-image-updater, jfrog-cli, gogatekeeper, helm-set-status, argo-cd-fips, rancher-agent,...

GO-2026-5094 vulnerabilities

Vulnerabilities for packages: envoy-gateway-fips, argocd-image-updater-fips, gitlab-rails-ce, argocd-image-updater, kots, portieris, gitness, gitlab-rails-ce-fips, envoy-gateway, zot, portieris-fips...

GO-2026-5185 vulnerabilities

Vulnerabilities for packages: envoy-gateway-fips, argocd-image-updater-fips, gitlab-rails-ce, argocd-image-updater, kots, portieris, gitness, gitlab-rails-ce-fips, envoy-gateway, zot, portieris-fips...

GO-2024-3277 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips, argocd-image-updater-fips, aws-efs-csi-driver, argocd-image-updater...

GO-2026-5418 vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, argo-cd, argocd-image-updater...

GO-2025-3437 vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, argocd-image-updater...

GO-2025-3433 vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, argocd-image-updater...

GO-2026-5618 vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, argo-cd, argocd-image-updater...

GO-2026-5099 vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, argocd-image-updater...

GO-2025-3934 vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, argo-cd, argocd-image-updater...

GO-2023-1772 vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, argocd-image-updater, aactl, kubernetes-dashboard, kpt, bom...

GO-2025-3437 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GO-2024-2994 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, kubeflow-pipelines, ip-masq-agent, nodetaint, argocd-image-updater, kubernetes-csi-driver-hostpath, spark-operator, kubernetes-dns-node-cache, aws-efs-csi-driver, cri-tools, local-static-provisioner...

GO-2024-3286 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, kubeflow-pipelines, ip-masq-agent, nodetaint, argocd-image-updater, kubernetes-dns-node-cache, aws-efs-csi-driver, local-static-provisioner...

GO-2026-5099 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GO-2024-3277 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, argocd-image-updater...

GO-2026-5094 vulnerabilities

Vulnerabilities for packages: envoy-gateway, argocd-image-updater, gitness, zot, kots, portieris...