Argo CD Unauthenticated Access to sensitive setting

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. The vulnerability allows unauthorized access to the sensitive settings exposed by /api/v1/settings endpoint without authentication. All sensitive settings are hidden except passwordPattern. id: CVE-2024-37152 info: name: Ar...

GO-2026-4942 vulnerabilities

Vulnerabilities for packages: gitness, envoy-gateway, kots, portieris, zot, argocd-image-updater...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: cluster-api, rancher-agent, kubernetes, datadog-operator, telegraf, spicedb, cilium, gitlab-kas, yunikorn-k8shim, tetragon, kubernetes-csi-external-resizer, argocd-image-updater, kube-state-metrics, openfga, cluster-api-azure-controller, cloud-provider-aws,...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, kgateway-fips, cert-manager-cmctl-fips, k9s, oras-fips, kubescape, kubescape-operator-fips, tigera-operator-fips, gitlab-operator-fips, kyverno, drone, helm-mapkubeapis, falcoctl-fips, conftest, kube-mgmt, drone-fips, oras, conftest-fips,...

GO-2024-3277 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, argocd-image-updater-fips, aws-efs-csi-driver, aws-efs-csi-driver-fips...

GO-2026-5094 vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, envoy-gateway-fips, portieris-fips, gitlab-rails-ce-fips, zot, envoy-gateway, argocd-image-updater, portieris, kots, gitlab-rails-ce, gitness...

GO-2026-5185 vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, envoy-gateway-fips, portieris-fips, gitlab-rails-ce-fips, zot, envoy-gateway, argocd-image-updater, portieris, kots, gitlab-rails-ce, gitness...

GO-2026-5418 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, argocd-image-updater-fips, argo-cd...

GO-2025-3433 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, argocd-image-updater-fips...

GO-2025-3437 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, argocd-image-updater-fips...

GO-2026-5618 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, argocd-image-updater-fips, argo-cd...

GO-2026-5099 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, argocd-image-updater-fips...

GO-2025-3934 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, argocd-image-updater-fips, argo-cd...

GO-2023-1772 vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, kubernetes-dashboard, bom, aactl, argocd-image-updater, kpt...

GO-2025-3437 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GO-2024-2994 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, kubernetes-csi-driver-hostpath, kubeflow-pipelines, nodetaint, local-static-provisioner, spark-operator, k8s-device-plugin, kubernetes-dns-node-cache, cri-tools, argocd-image-updater, ip-masq-agent...

GO-2024-3286 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, kubeflow-pipelines, nodetaint, local-static-provisioner, k8s-device-plugin, kubernetes-dns-node-cache, argocd-image-updater, ip-masq-agent...

GO-2026-5099 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GO-2024-3277 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, argocd-image-updater...

GO-2026-5185 vulnerabilities

Vulnerabilities for packages: gitness, envoy-gateway, kots, portieris, zot, argocd-image-updater...