1021 matches found
Sensitive Information Disclosure
github.com/argoproj/argo-cd is vulnerable to Sensitive Information Disclosure. The vulnerability is due to the project details API returning stored repository usernames and passwords in its response, and an attacker with a token scoped only for standard application management can call that endpoi...
BIT-ARGO-CD-2025-59538 Argo CD is Vulnerable to Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. For versions 2.9.0 through 2.14.19, 3.0.0 through 3.2.0, 3.1.6 and 3.0.17, when the webhook.azuredevops.username and webhook.azuredevops.password are not set in the default configuration, the /api/webhook endpoint crashes t...
BIT-ARGO-CD-2025-59537 argo-cd is vulnerable to unauthenticated DoS attack via malformed Gogs webhook payload
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions 1.2.0 through 1.8.7, 2.0.0 through 2.14.19, 3.0.0 through 3.2.0, 3.1.7 and 3.0.18 are vulnerable to malicious API requests which can crash the API server and cause denial of service to legitimate clients. With the...
EUVD-2025-31768
Malicious code in bioql PyPI...
EUVD-2024-0850
Malicious code in bioql PyPI...
EUVD-2022-1438
Malicious code in bioql PyPI...
EUVD-2023-2501
Malicious code in bioql PyPI...
EUVD-2024-1033
Malicious code in bioql PyPI...
EUVD-2025-0130
Malicious code in bioql PyPI...
EUVD-2024-1545
Malicious code in bioql PyPI...
EUVD-2023-0830
Malicious code in bioql PyPI...
EUVD-2022-6302
Malicious code in bioql PyPI...
EUVD-2022-1529
Malicious code in bioql PyPI...
EUVD-2024-1173
Malicious code in bioql PyPI...
EUVD-2022-5105
Malicious code in bioql PyPI...
EUVD-2024-0307
Malicious code in bioql PyPI...
EUVD-2024-2418
Malicious code in bioql PyPI...
EUVD-2022-5894
Malicious code in bioql PyPI...