169 matches found
Argo CD Unauthenticated Access to sensitive setting
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. The vulnerability allows unauthorized access to the sensitive settings exposed by /api/v1/settings endpoint without authentication. All sensitive settings are hidden except passwordPattern. id: CVE-2024-37152 info: name: Ar...
Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.21.1 security update
Important: Red Hat OpenShift GitOps v1.21.1 security update An update is now available for Red Hat OpenShift GitOps. Bug Fixes and Enhancements: GITOPS-10083 RC 1.21.0-7: Missing permission for web-based terminal in Argocd UI GITOPS-10178 OpenShift GitOps operator v1.21.0 breaks Redis-HA...
GHSA-X527-X647-Q7GG vulnerabilities
Vulnerabilities for packages: skaffold, coder-fips, etcd, snyk-cli, flux-source-controller-fips, flux-source-controller, elastic-agent-fips, containerd, frankenphp-8.3, fscrypt, kine, terraform, mattermost-fips, nerdctl, seaweedfs-rocksdb-fips, external-dns, gitlab-kas, reports-server,...
GHSA-W879-237Q-WC7R vulnerabilities
Vulnerabilities for packages: tekton-chains, grype-fips, crossplane-provider-azure-search, skaffold, witness, coder-fips, step, etcd, rootlesskit-fips, wal-g, crossplane-provider-azure-servicefabric, juicefs, peerdb-flow, crossplane-provider-azure-policyinsights, flux-source-controller-fips,...
GHSA-45GG-VH54-H5M9 vulnerabilities
Vulnerabilities for packages: skaffold, coder-fips, etcd, snyk-cli, flux-source-controller-fips, flux-source-controller, elastic-agent-fips, containerd, frankenphp-8.3, fscrypt, kine, terraform, mattermost-fips, nerdctl, seaweedfs-rocksdb-fips, external-dns, gitlab-kas, reports-server,...
GHSA-89GR-R52H-F8RX vulnerabilities
Vulnerabilities for packages: tekton-chains, grype-fips, crossplane-provider-azure-search, skaffold, witness, coder-fips, step, etcd, rootlesskit-fips, wal-g, crossplane-provider-azure-servicefabric, juicefs, peerdb-flow, crossplane-provider-azure-policyinsights, flux-source-controller-fips,...
GHSA-VGWF-H737-FF37 vulnerabilities
Vulnerabilities for packages: grype-fips, skaffold, witness, coder-fips, etcd, rootlesskit-fips, wal-g, juicefs, peerdb-flow, snyk-cli, flux-source-controller-fips, flux-source-controller, pulumi-language-java, elastic-agent-fips, containerd, frankenphp-8.3, fscrypt, kine, terraform,...
GHSA-78MQ-XCR3-XM33 vulnerabilities
Vulnerabilities for packages: grype-fips, skaffold, witness, etcd, snyk-cli, flux-source-controller-fips, flux-source-controller, pulumi-language-java, elastic-agent-fips, containerd, frankenphp-8.3, fscrypt, kine, terraform, mattermost-fips, syft-fips, nerdctl, podman, external-dns, gitlab-kas,...
GHSA-QPW4-5X99-6VJP vulnerabilities
Vulnerabilities for packages: grype-fips, skaffold, witness, coder-fips, etcd, rootlesskit-fips, wal-g, juicefs, peerdb-flow, snyk-cli, flux-source-controller-fips, flux-source-controller, pulumi-language-java, elastic-agent-fips, containerd, frankenphp-8.3, fscrypt, kine, terraform,...
GHSA-RM3J-F69W-WQMQ vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-elasticache, cert-manager, cosign, rootlesskit, external-dns, grype, sealed-secrets, tw, eksctl, crossplane-provider-family-aws, kubernetes, openbao, zot, gitea, pulumi-language-dotnet, tekton-chains, k3s, crossplane-provider-aws-iam,...
GHSA-W879-237Q-WC7R vulnerabilities
Vulnerabilities for packages: cert-manager, cosign, rootlesskit, external-dns, grype, eksctl, kubernetes, openbao, zot, gitea, pulumi-language-dotnet, tekton-chains, k3s, docker-machine-driver-harvester, syft, gomplate, spire-server, cilium-cli, crossplane-provider-azure-authorization,...
GHSA-X527-X647-Q7GG vulnerabilities
Vulnerabilities for packages: skaffold, cert-manager, flux-source-controller, gitlab-kas, flux-image-automation-controller, fscrypt, containerd, external-dns, rancher, kots, knative-serving, flux, kubernetes, mattermost, zarf, cloud-provider-aws, zot, gitea, kine, k3s, kyverno, osv-scanner, trivy...
GHSA-78MQ-XCR3-XM33 vulnerabilities
Vulnerabilities for packages: skaffold, cert-manager, external-secrets-operator, flux-source-controller, gitlab-kas, pulumi-language-yaml, flux-image-automation-controller, melange, fscrypt, chezmoi, containerd, external-dns, scorecard, witness, nfpm, grype, kots, podman, helm, pulumi, dagger,...
GO-2026-5099 ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction in github.com/argoproj/argo-cd
ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction in github.com/argoproj/argo-cd...
OPENSUSE-SU-2026:10888-1 argocd-cli-3.4.3-1.1 on GA media
These are all security issues fixed in the argocd-cli-3.4.3-1.1 package on the GA media of openSUSE Tumbleweed...
Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.20.4 security update
Important: Red Hat OpenShift GitOps v1.20.4 security update An update is now available for Red Hat OpenShift GitOps. Bug Fixes and Enhancements: GITOPS-8784 Service-CA annotation removed from argocd-server Service during v1.12.3 - v1.12.4 upgrade path, persists in later versions GITOPS-9549...
Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.19.4 security update
Important: Red Hat OpenShift GitOps v1.19.4 security update An update is now available for Red Hat OpenShift GitOps. Bug Fixes and Enhancements: GITOPS-8784 Service-CA annotation removed from argocd-server Service during v1.12.3 - v1.12.4 upgrade path, persists in later versions...
CVE-2026-45737 vulnerabilities
Vulnerabilities for packages: argo-cd, argocd-image-updater...