CVE-2025-55190 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GHSA-786Q-9HCG-V9FF vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GHSA-786Q-9HCG-V9FF vulnerabilities

Vulnerabilities for packages: argocd-image-updater, argo-cd, argocd-image-updater-fips...

CVE-2025-55190 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, argo-cd, argocd-image-updater-fips...

CVE-2025-47933 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GHSA-2HJ5-G64G-FP6P vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

CVE-2025-47933 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, argo-cd, argocd-image-updater-fips...

GHSA-2HJ5-G64G-FP6P vulnerabilities

Vulnerabilities for packages: argocd-image-updater, argo-cd, argocd-image-updater-fips...

argocd-cli-2.14.10-1.1 on GA media (moderate)

argocd-cli-2.14.10-1.1 on GA media Announcement ID: openSUSE-SU-2025:15006-1 Rating: moderate Cross-References: CVE-2025-29786 CVSS scores: CVE-2025-29786 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-29786 SUSE : 8.2...

OPENSUSE-SU-2025:15006-1 argocd-cli-2.14.10-1.1 on GA media

These are all security issues fixed in the argocd-cli-2.14.10-1.1 package on the GA media of openSUSE Tumbleweed...

argocd-cli-2.14.8-1.1 on GA media (moderate)

argocd-cli-2.14.8-1.1 on GA media Announcement ID: openSUSE-SU-2025:14921-1 Rating: moderate Cross-References: CVE-2025-26791 CVSS scores: CVE-2025-26791 SUSE : 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N CVE-2025-26791 SUSE : 2.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA...

OPENSUSE-SU-2025:14921-1 argocd-cli-2.14.8-1.1 on GA media

These are all security issues fixed in the argocd-cli-2.14.8-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: distribution, rclone, kine, step-ca, grafana-mimir, op-geth, opencost, rook, argo-rollouts, opentelemetry-collector, sqlexporter, azcopy, zot, falcoctl, crossplane-provider-family-azure, sftpgo-plugin-kms, atlantis, gomplate, weaviate, boring-registry, wal-g,...

GHSA-MH63-6H87-95CP vulnerabilities

Vulnerabilities for packages: step-ca-fips, flux-kustomize-controller, trivy, fulcio, goreleaser, secrets-store-csi-driver-provider-azure, sops, thanos-fips, minio-operator-fips, amazon-cloudwatch-agent-fips, argocd-image-updater, kube-metrics-adapter, openfga-fips, rekor, promxy-fips, rancher,...

SUSE CVE-2024-13484

A flaw was found in openshift-gitops-operator-container. The openshift.io/cluster-monitoring label is applied to all namespaces that deploy an ArgoCD CR instance, allowing the namespace to create a rogue PrometheusRule. This issue can have adverse effects on the platform monitoring stack, as the...

Unauthorized Rule Injection

ArgoCD is vulnerable to unauthorized rule injection. The vulnerability is due to improper namespace isolation, as the openshift.io/cluster-monitoring label is automatically applied to all namespaces deploying an ArgoCD CR instance, allowing them to create unauthorized PrometheusRule objects...

CVE-2025-23216 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, argocd-image-updater-fips...

GO-2025-3427 Malicious PrometheusRule creation to all namespaces that deploy a ArgoCD CR instance in github.com/redhat-developer/gitops-operator

Malicious PrometheusRule creation to all namespaces that deploy a ArgoCD CR instance in github.com/redhat-developer/gitops-operator...

OpenShift GitOps Operator Namespace Isolation Break

A flaw was found in openshift-gitops-operator-container. The openshift.io/cluster-monitoring label is applied to all namespaces that deploy an ArgoCD CR instance, allowing the namespace to create a rogue PrometheusRule. This issue can have adverse effects on the platform monitoring stack, as the...

GHSA-58FX-7V9Q-3G56 OpenShift GitOps Operator Namespace Isolation Break

A flaw was found in openshift-gitops-operator-container. The openshift.io/cluster-monitoring label is applied to all namespaces that deploy an ArgoCD CR instance, allowing the namespace to create a rogue PrometheusRule. This issue can have adverse effects on the platform monitoring stack, as the...