1756 matches found
ArgoCD Project API Token Repository Credentials Exposure
Argo CD API tokens with project-level permissions are able to retrieve sensitive repository credentials usernames, passwords through the project details API endpoint, even when the token only has standard application management permissions and no explicit access to secrets. This vulnerability...
GHSA-76P8-FHRM-VPC7 vulnerabilities
Vulnerabilities for packages: cloud-provider-vsphere, cue, cloudprober, flux-kustomize-controller, neuvector-dbgen, cilium-cli, kube-metrics-adapter, golangci-lint, gh, seaweedfs, spire-server, crossplane-provider-aws-sns, go-discover, local-path-provisioner, mountpoint-s3-csi-driver, polaris,...
GO-2025-3521 vulnerabilities
Vulnerabilities for packages: longhorn-share-manager, longhorn-share-manager-fips, harvester, azure-container-networking, rke2-runtime-fips, vcluster, argo-cd-fips, longhorn-manager-fips, kubernetes, spark-operator-fips, longhorn-manager, harvester-fips...
GO-2025-3547 vulnerabilities
Vulnerabilities for packages: longhorn-share-manager, cluster-autoscaler-fips, harvester, kubernetes-csi-driver-hostpath, longhorn-share-manager-fips, rancher-system-agent, rke2-runtime-fips, azuredisk-csi, azurefile-csi, argo-cd-fips, longhorn-manager-fips, longhorn-manager, azurefile-csi-fips,...
GO-2026-5882 vulnerabilities
Vulnerabilities for packages: k9s-fips, kubescape-server-fips, cloudbeat, cluster-api-helm-controller-fips, drone, zarf-fips, helm-exporter, tigera-operator, helm-push, zarf, gitlab-operator, crossplane-fips, helm-mapkubeapis, kubescape-operator, cert-manager-cmctl, gatekeeper, maru, kots,...
GO-2026-4678 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, argo-workflows-fips, argo-workflows...
GO-2023-1930 vulnerabilities
Vulnerabilities for packages: argo-events, argo-events-fips...
GO-2026-5148 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-fips, kubeflow-pipelines-driver-fips, argo-workflows, kubeflow-pipelines, argo-workflows-fips...
GO-2026-5527 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-fips, kubeflow-pipelines-driver-fips, argo-workflows, kubeflow-pipelines, argo-workflows-fips...
GO-2025-4024 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, argo-workflows-fips, argo-workflows...
GO-2024-3303 vulnerabilities
Vulnerabilities for packages: argo-workflows-fips, argo-workflows...
GO-2025-4223 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, argo-workflows-fips, argo-workflows...
GO-2026-4350 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, argo-workflows-fips, argo-workflows...
GO-2025-3608 vulnerabilities
Vulnerabilities for packages: argo-events-fips...
GO-2026-5418 vulnerabilities
Vulnerabilities for packages: argocd-image-updater-fips, argo-cd, argocd-image-updater...
GO-2026-5885 vulnerabilities
Vulnerabilities for packages: k9s-fips, kubescape-server-fips, k8sgpt, cloudbeat, cluster-api-helm-controller-fips, drone, zarf-fips, helm-exporter, tigera-operator, helm-push, zarf, gitlab-operator, crossplane-fips, helm-mapkubeapis, kubescape-operator, cert-manager-cmctl, gatekeeper, maru, kots...
GO-2026-5693 vulnerabilities
Vulnerabilities for packages: grafana, grafana-fips, upwind-agent, gitlab-rails-ce, gitaly, gitlab-rails-ce-fips, argo-cd-fips, argo-cd, external-secrets-operator, flux, nemo, guac, teleport, external-secrets-operator-fips, terragrunt, terragrunt-fips, flux-fips...
GO-2024-2605 vulnerabilities
Vulnerabilities for packages: trillian, caddy, wavefront-collector-for-kubernetes, argo-workflows, caddy-fips, argo-workflows-fips, trillian-fips, step-ca, step, kots...