169 matches found
Argo CD Unauthenticated Access to sensitive setting
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. The vulnerability allows unauthorized access to the sensitive settings exposed by /api/v1/settings endpoint without authentication. All sensitive settings are hidden except passwordPattern. id: CVE-2024-37152 info: name: Ar...
Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.21.1 security update
Important: Red Hat OpenShift GitOps v1.21.1 security update An update is now available for Red Hat OpenShift GitOps. Bug Fixes and Enhancements: GITOPS-10083 RC 1.21.0-7: Missing permission for web-based terminal in Argocd UI GITOPS-10178 OpenShift GitOps operator v1.21.0 breaks Redis-HA...
GHSA-X527-X647-Q7GG vulnerabilities
Vulnerabilities for packages: vitess, argo-cd, trivy, argo-workflows-fips, snyk-cli, frankenphp-8.4, knative-kafka-broker, rancher, mattermost, elastic-agent-fips, nemo, flux-source-controller, kubernetes, drone, prometheus-mongodb-exporter, commercial-grafana, etcd, cloudbeat-fips, k9s,...
GHSA-45GG-VH54-H5M9 vulnerabilities
Vulnerabilities for packages: vitess, argo-cd, trivy, argo-workflows-fips, snyk-cli, frankenphp-8.4, knative-kafka-broker, docker-machine-driver-harvester, rancher, mattermost, elastic-agent-fips, nemo, flux-source-controller, kubernetes, drone, prometheus-mongodb-exporter, commercial-grafana,...
GHSA-VGWF-H737-FF37 vulnerabilities
Vulnerabilities for packages: vitess, argo-cd, trivy, juicefs, dagger, pulumi-kubernetes-operator, argo-workflows-fips, chainctl, chainloop-cli-fips, gitlab-runner-fips, snyk-cli, teleport-operator-fips, rootlesskit, gptscript, frankenphp-8.4, knative-kafka-broker, docker-machine-driver-harvester...
GHSA-89GR-R52H-F8RX vulnerabilities
Vulnerabilities for packages: vitess, argo-cd, trivy, juicefs, crossplane-provider-azure-purview, dagger, pulumi-kubernetes-operator, argo-workflows-fips, chainctl, chainloop-cli-fips, gitlab-runner-fips, slsa-verifier, snyk-cli, rootlesskit, teleport-operator-fips, gptscript, frankenphp-8.4,...
GHSA-W879-237Q-WC7R vulnerabilities
Vulnerabilities for packages: vitess, argo-cd, trivy, juicefs, crossplane-provider-azure-purview, dagger, pulumi-kubernetes-operator, argo-workflows-fips, chainctl, chainloop-cli-fips, gitlab-runner-fips, slsa-verifier, snyk-cli, rootlesskit, teleport-operator-fips, gptscript, frankenphp-8.4,...
GHSA-78MQ-XCR3-XM33 vulnerabilities
Vulnerabilities for packages: vitess, argo-cd, trivy, dagger, pulumi-kubernetes-operator, argo-workflows-fips, chainctl, chainloop-cli-fips, teleport-operator-fips, snyk-cli, gptscript, frankenphp-8.4, knative-kafka-broker, splunk-otel-collector, mattermost, podman-fips, amazon-ssm-agent,...
GHSA-QPW4-5X99-6VJP vulnerabilities
Vulnerabilities for packages: vitess, argo-cd, trivy, juicefs, dagger, pulumi-kubernetes-operator, argo-workflows-fips, chainctl, chainloop-cli-fips, gitlab-runner-fips, snyk-cli, teleport-operator-fips, rootlesskit, gptscript, frankenphp-8.4, knative-kafka-broker, docker-machine-driver-harvester...
GHSA-W879-237Q-WC7R vulnerabilities
Vulnerabilities for packages: cosign, helm, syft, k8sgpt, argo-events, sops, cilium, osv-scanner, gomplate, steampipe, grype, k3s, ksops, trivy, vault-benchmark, kargo, cluster-api-azure-controller, slsa-verifier, external-dns, fulcio, gitea, policy-controller, rancher-machine, go-discover,...
GHSA-RM3J-F69W-WQMQ vulnerabilities
Vulnerabilities for packages: cosign, helm, gitlab-pages, syft, k8sgpt, argo-events, sops, cilium, crossplane-provider-aws-cloudformation, crossplane-provider-aws-firehose, osv-scanner, src, gomplate, steampipe, crossplane-provider-aws-cloudfront, grype, k3s, ksops, trivy, vault-benchmark, kargo,...
GHSA-X527-X647-Q7GG vulnerabilities
Vulnerabilities for packages: spire-server, aactl, helm, kine, k9s, cilium, kubernetes-dashboard, chisel, fscrypt, nerdctl, osv-scanner, rancher, containerd, opentelemetry-collector, cert-manager, minio, kubernetes, cloud-provider-aws, kyverno, flux-image-automation-controller, k3s, mattermost,...
GHSA-78MQ-XCR3-XM33 vulnerabilities
Vulnerabilities for packages: spire-server, aactl, helm, wolfictl, act, pulumi-kubernetes-operator, kine, syft, witness, argo-events, k9s, cilium, melange, dagger, scorecard, trivy-operator, chezmoi, gitlab-kas, kubernetes-dashboard, fscrypt, nerdctl, osv-scanner, pulumi-language-java, containerd...
GO-2026-5099 ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction in github.com/argoproj/argo-cd
ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction in github.com/argoproj/argo-cd...
OPENSUSE-SU-2026:10888-1 argocd-cli-3.4.3-1.1 on GA media
These are all security issues fixed in the argocd-cli-3.4.3-1.1 package on the GA media of openSUSE Tumbleweed...
Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.20.4 security update
Important: Red Hat OpenShift GitOps v1.20.4 security update An update is now available for Red Hat OpenShift GitOps. Bug Fixes and Enhancements: GITOPS-8784 Service-CA annotation removed from argocd-server Service during v1.12.3 - v1.12.4 upgrade path, persists in later versions GITOPS-9549...
Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.19.4 security update
Important: Red Hat OpenShift GitOps v1.19.4 security update An update is now available for Red Hat OpenShift GitOps. Bug Fixes and Enhancements: GITOPS-8784 Service-CA annotation removed from argocd-server Service during v1.12.3 - v1.12.4 upgrade path, persists in later versions...
CVE-2026-45737 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, argo-cd...