BIT-ARGO-CD-2025-59538 Argo CD is Vulnerable to Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. For versions 2.9.0 through 2.14.19, 3.0.0 through 3.2.0, 3.1.6 and 3.0.17, when the webhook.azuredevops.username and webhook.azuredevops.password are not set in the default configuration, the /api/webhook endpoint crashes t...

EUVD-2023-40507

Malicious code in bioql PyPI...

EUVD-2025-31758

Malicious code in bioql PyPI...

EUVD-2023-40401

Malicious code in bioql PyPI...

EUVD-2023-25720

Malicious code in bioql PyPI...

EUVD-2023-25731

Malicious code in bioql PyPI...

EUVD-2023-37322

Malicious code in bioql PyPI...

EUVD-2023-25732

Malicious code in bioql PyPI...

EUVD-2023-25736

Malicious code in bioql PyPI...

EUVD-2025-21915

Malicious code in bioql PyPI...

EUVD-2023-41980

Malicious code in bioql PyPI...

EUVD-2023-25918

Malicious code in bioql PyPI...

EUVD-2024-35770

Malicious code in bioql PyPI...

EUVD-2023-40789

Malicious code in bioql PyPI...

EUVD-2025-14048

Malicious code in bioql PyPI...

EUVD-2024-35769

Malicious code in bioql PyPI...

EUVD-2023-1000

Malicious code in bioql PyPI...

EUVD-2024-18382

Malicious code in bioql PyPI...

SUSE CVE-2025-59538

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. For versions 2.9.0-rc1 through 2.14.19, 3.0.0-rc1 through 3.2.0-rc1, 3.1.6 and 3.0.17, when the webhook.azuredevops.username and webhook.azuredevops.password are not set in the default configuration, the /api/webhook endpoi...

CVE-2025-59538

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. For versions 2.9.0-rc1 through 2.14.19, 3.0.0-rc1 through 3.2.0-rc1, 3.1.6 and 3.0.17, when the webhook.azuredevops.username and webhook.azuredevops.password are not set in the default configuration, the /api/webhook endpoi...