EUVD-2026-116381

A command injection vulnerability was found in Argo CD Image Updater, where a proxy URL configured on an SSH Git repository is passed unsanitized into a shell-interpreted SSH command. An attacker able to set a malicious proxy value can inject shell metacharacters to execute arbitrary commands and...

CVE-2026-121621

A command injection vulnerability was found in Argo CD Image Updater, where a proxy URL configured on an SSH Git repository is passed unsanitized into a shell-interpreted SSH command. An attacker able to set a malicious proxy value can inject shell metacharacters to execute arbitrary commands and...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: gitea, argo-events, argo-workflows, go-licenses, kubevela, pulumi-language-dotnet, zot, timoni, crossplane, syft, pulumi-kubernetes-operator, gitsign, task, trivy, wolfictl, zarf, skaffold, pulumi, pulumi-language-yaml, k9s, flux-image-automation-controller,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: gitea, argo-events, argo-workflows, go-licenses, kubevela, pulumi-language-dotnet, zot, timoni, crossplane, syft, pulumi-kubernetes-operator, gitsign, task, trivy, wolfictl, zarf, skaffold, pulumi, pulumi-language-yaml, k9s, flux-image-automation-controller,...