1772 matches found
Sensitive Information Disclosure
github.com/argoproj/argo-cd is vulnerable to Sensitive Information Disclosure. The vulnerability is due to the project details API returning stored repository usernames and passwords in its response, and an attacker with a token scoped only for standard application management can call that endpoi...
BIT-ARGO-CD-2025-59538 Argo CD is Vulnerable to Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. For versions 2.9.0 through 2.14.19, 3.0.0 through 3.2.0, 3.1.6 and 3.0.17, when the webhook.azuredevops.username and webhook.azuredevops.password are not set in the default configuration, the /api/webhook endpoint crashes t...
BIT-ARGO-CD-2025-59537 argo-cd is vulnerable to unauthenticated DoS attack via malformed Gogs webhook payload
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions 1.2.0 through 1.8.7, 2.0.0 through 2.14.19, 3.0.0 through 3.2.0, 3.1.7 and 3.0.18 are vulnerable to malicious API requests which can crash the API server and cause denial of service to legitimate clients. With the...
EUVD-2024-1033
Malicious code in bioql PyPI...
EUVD-2025-31768
Malicious code in bioql PyPI...
EUVD-2025-31758
Malicious code in bioql PyPI...
EUVD-2024-1545
Malicious code in bioql PyPI...
EUVD-2022-6302
Malicious code in bioql PyPI...
EUVD-2022-5808
Malicious code in bioql PyPI...
EUVD-2025-0130
Malicious code in bioql PyPI...
EUVD-2022-1438
Malicious code in bioql PyPI...
EUVD-2025-10910
Malicious code in bioql PyPI...
EUVD-2022-3599
Malicious code in bioql PyPI...
EUVD-2023-2501
Malicious code in bioql PyPI...
EUVD-2024-0850
Malicious code in bioql PyPI...
EUVD-2025-26875
Malicious code in bioql PyPI...
EUVD-2023-0830
Malicious code in bioql PyPI...
EUVD-2022-1270
Malicious code in bioql PyPI...