GHSA-G88P-R42R-PPP9 Repository Credentials Race Condition Crashes Argo CD Server

Summary A race condition in the repository credentials handler can cause the Argo CD server to panic and crash when concurrent operations are performed on the same repository URL. Details The vulnerability is located in numerous repository related handlers in the util/db/repositorysecrets.go file...

Repository Credentials Race Condition Crashes Argo CD Server

Summary A race condition in the repository credentials handler can cause the Argo CD server to panic and crash when concurrent operations are performed on the same repository URL. Details The vulnerability is located in numerous repository related handlers in the util/db/repositorysecrets.go file...

Race Condition

Overview Affected versions of this package are vulnerable to Race Condition in the repository credentials handler of the util/db/repositorysecrets.go file while performing concurrent operations for the same repository URL. An attacker can cause the server to crash and become unavailable by...

CVE-2025-61584 serverless-dns is vulnerable to Command Injection through pr.yml GitHub Action Workflow

serverless-dns is a RethinkDNS resolver that deploys to Cloudflare Workers, Deno Deploy, Fastly, and Fly.io. Versions through abd including 0.1.30 have a vulnerability where the pr.yml GitHub Action interpolates in an unsafe manner untrusted input, specifically the...

PT-2025-40034

Name of the Vulnerable Software and Affected Versions Argo CD versions 2.1.0 through 2.14.19 Argo CD versions 3.0.0-rc1 through 3.0.18 Argo CD versions 3.1.0-rc1 through 3.1.7 Argo CD version 3.2.0-rc1 Description Argo CD, a declarative GitOps continuous delivery tool for Kubernetes, is susceptib...

PT-2025-40043

Summary A race condition in the repository credentials handler can cause the Argo CD server to panic and crash when concurrent operations are performed on the same repository URL. Details The vulnerability is located in numerous repository related handlers in the util/db/repository secrets.go fil...

Argo CD 竞争条件问题漏洞

Argo CD is an Argo open source declarative GitOps continuous delivery tool for Kubernetes. Argo CD suffers from a Competitive Condition Issue vulnerability that stems from a competitive condition in the repository credentials handler that could lead to a denial of service attack. The following...

PT-2025-40055

Name of the Vulnerable Software and Affected Versions Argo CD versions 1.2.0 through 1.8.7 Argo CD versions 2.0.0-rc1 through 2.14.19 Argo CD versions 3.0.0-rc1 through 3.2.0-rc1 Argo CD version 3.1.7 Argo CD version 3.0.18 Description Argo CD is susceptible to denial of service through malicious...

CVE-2025-45376

Dell Repository Manager DRM, versions 3.4.7 and 3.4.8, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2025-45376

Dell Repository Manager DRM, versions 3.4.7 and 3.4.8, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2025-45376

Dell Repository Manager DRM, versions 3.4.7 and 3.4.8, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2025-45376

Dell Repository Manager DRM, versions 3.4.7 and 3.4.8, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2025-45376

Dell Repository Manager (DRM) versions 3.4.7–3.4.8 are affected by an Improper Handling of Insufficient Permissions that could allow a local, low-privilege attacker to elevate privileges. The underlying issue is privilege handling rather than remote access, and exploitation is described as local ...

Dell Repository Manager 安全漏洞

Dell Repository Manager is a data repository manager from Dell USA. A security vulnerability exists in Dell Repository Manager versions 3.4.7 and 3.4.8, which stems from improper handling of privileges and could result in elevated privileges...

PT-2025-39876

Name of the Vulnerable Software and Affected Versions Dell Repository Manager versions 3.4.7 through 3.4.8 Description Dell Repository Manager DRM versions 3.4.7 and 3.4.8 have an issue related to improper handling of insufficient permissions or privileges. A local attacker with limited privilege...

exploitdb

The Exploit Database Git Repository This is an official repos...

Malicious code in node-ts-esm (npm)

--- -= Per source details. Do not edit below this line.=-...

Ensure That GPG Verification Is Configured for the Yum Repositories

Software packages may be tampered with by attackers during network transmission or local storage. If the integrity verification is not performed on the software packages, software tampered with by attackers may be installed. As a result, the server or even the entire network cluster is attacked. ...

CVE-2021-24219

creationtimestamp| type| source ---|---|--- 2025-09-24 05:15:10+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-24219.yaml 2025-09-28 21:02:27+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lzwfez6mib23 2026-06-19...

ROS-20250924-01

The vulnerability of the pip module of the Python programming language is related to the failure to clean data at the control layer. Exploitation of the vulnerability could allow an attacker to change the repository configuration...