GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: goreleaser, syft, tfsec, nuclei, argo-workflows, crossplane, grafana-alloy, steampipe, trivy-operator, grype, guac, pulumi-language-java, flux-source-controller, gitlab-runner, terragrunt, trufflehog, zarf, wolfictl, k9s, dagger, cerbos, kubescape, teleport,...

GO-2025-3995 Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd...

PT-2025-36652

Argo CD's Project API Token Exposes Repository Credentials in github.com/argoproj/argo-cd...

CVE-2022-29165

creationtimestamp| type| source ---|---|--- 2022-05-20 18:31:32+00:00| seen| https://t.me/cibsecurity/43061 2024-04-04 16:48:44+00:00| published-proof-of-concept| https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/argocdexposedui...