2951 matches found
ArgoCD Project API Token Repository Credentials Exposure
Argo CD API tokens with project-level permissions are able to retrieve sensitive repository credentials usernames, passwords through the project details API endpoint, even when the token only has standard application management permissions and no explicit access to secrets. This vulnerability...
CVE-2024-31989
CVE-2024-31989 CVE-Exploit for Argo CD This repository contains an exploit for CVE-2024-31989 that targets a Redis instance without a password in Argo CD. Description Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. This exploit leverages a vulnerability in Argo CD where ...
POC_CVE-2026-42880
CVE-2026-42880 — ArgoCD Secret Exposure via ServerSideDiff A lab environment for reproducing and detecting CVE-2026-42880 , a critical vulnerability in Argo CD where the ServerSideDiff gRPC handler exposes Kubernetes Secret data to read-only users. Vulnerability Overview Field| Details ---|--- CV...
CLEANSTART-2026-ZJ07252 deepmerge through 4
Security vulnerability affects the argo-workflows package. deepmerge through 4...
CLEANSTART-2026-BX08883 uri-js through 4
Security vulnerability affects the argo-workflows package. uri-js through 4...
CLEANSTART-2026-KM32338 proxy-addr is a Node
Security vulnerability affects the argo-workflows package. proxy-addr is a Node...
CLEANSTART-2026-SU59026 compression is a Node
Security vulnerability affects the argo-workflows package. compression is a Node...
CLEANSTART-2026-SF33903 js-yaml is a JavaScript YAML parser and dumper
Security vulnerability affects the argo-workflows package. js-yaml is a JavaScript YAML parser and dumper...
CLEANSTART-2026-MA07255 source-map-js through 1
Security vulnerability affects the argo-workflows package. source-map-js through 1...
CLEANSTART-2026-HS21111 brace-expansion library generates arbitrary strings containing a common prefix and suffix
Security vulnerability affects the argo-workflows package. The brace-expansion library generates arbitrary strings containing a common prefix and suffix...
CLEANSTART-2026-SN62789 Impact: A bad regular expression is generated any time you have three or more parameters within a single segment, separated by something that is not a period (
Security vulnerability affects the argo-workflows package. Impact: A bad regular expression is generated any time you have three or more parameters within a single segment, separated by something that is not a period...
CLEANSTART-2026-AB74682 Picomatch is a glob matcher written JavaScript
Security vulnerability affects the argo-workflows package. Picomatch is a glob matcher written JavaScript...
CLEANSTART-2026-HR70572 Picomatch is a glob matcher written JavaScript
Security vulnerability affects the argo-workflows package. Picomatch is a glob matcher written JavaScript...
CLEANSTART-2026-NI09909 Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript
Security vulnerability affects the argo-workflows package. Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript...
CLEANSTART-2026-DW63739 Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript
Security vulnerability affects the argo-workflows package. Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript...
CLEANSTART-2026-KG77571 minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects
Security vulnerability affects the argo-workflows package. minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects...
CLEANSTART-2026-GI54915 brace-expansion library generates arbitrary strings containing a common prefix and suffix
Security vulnerability affects the argo-workflows package. The brace-expansion library generates arbitrary strings containing a common prefix and suffix...
CLEANSTART-2026-UA76362 fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node
Security vulnerability affects the argo-workflows package. fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node...
CLEANSTART-2026-FG02878 brace-expansion library generates arbitrary strings containing a common prefix and suffix
Security vulnerability affects the argo-workflows package. The brace-expansion library generates arbitrary strings containing a common prefix and suffix...