CLEANSTART-2026-OU97529 Security fixes in argo-cd 3.3.14-r1

Package argo-cd version 3.3.14-r1 fixes 5 vulnerabilities: CVE-2026-71556, CVE-2026-71557, CVE-2026-2303, ghsa-hrxh-6v49-42gf, CVE-2026-50163...

CLEANSTART-2026-NY04600 Security fixes in argo-cd 3.3.14-r2

Package argo-cd version 3.3.14-r2 fixes 1 vulnerabilities: ghsa-259r-337f-4rfw...

CLEANSTART-2026-LO94255 Security fixes in argo-cd 3.3.14-r3

Package argo-cd version 3.3.14-r3 fixes 2 vulnerabilities: CVE-2026-50163, CVE-2026-41178...

CLEANSTART-2026-VL72619 Security fixes in argo-cd 3.3.13-r0

Package argo-cd version 3.3.13-r0 fixes 3 vulnerabilities: CVE-2026-50163, CVE-2026-71556, CVE-2026-71557...

CLEANSTART-2026-VT71030 Security fixes in argo-cd-fips 3.4.7-r2

Package argo-cd-fips version 3.4.7-r2 fixes 12 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...

CLEANSTART-2026-OO99794 Security fixes in argo-cd-fips 3.4.7-r1

Package argo-cd-fips version 3.4.7-r1 fixes 13 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-56853, CVE-2026-56859...

CLEANSTART-2026-II53972 Security fixes in argo-cd 3.4.6-r1

Package argo-cd version 3.4.6-r1 fixes 3 vulnerabilities: CVE-2026-71557, CVE-2026-71556, CVE-2026-50163...

CLEANSTART-2026-EC97009 Security fixes in argo-cd 3.4.5-r2

Package argo-cd version 3.4.5-r2 fixes 3 vulnerabilities: ghsa-hrxh-6v49-42gf, ghsa-259r-337f-4rfw, CVE-2026-41178...

zizmor v1.30.0

🌈 zizmor zizmor is a static analysis tool for CI/CD systems. It can find and fix security issues in common CI/CD setups, including GitHub Actions, Dependabot, and pre-commit. Some of the things zizmor finds: Template injection vulnerabilities, leading to attacker-controlled code execution...

PT-2026-89962

Package argo-cd version 3.3.14-r2 fixes 1 vulnerabilities: ghsa-259r-337f-4rfw...

PT-2026-89974

Package argo-cd version 3.4.7-r2 fixes 1 vulnerabilities: ghsa-259r-337f-4rfw...

ship-safe v9.7.5

The independent security agent for AI-written software. It finds issues, investigates whether they are real, and shows you the evidence. Website · Docs · Security & Data Flow · Benchmark · Pricing · Blog · Contribute Ship Safe CLI Ship Safe runs locally in your repo and works in two layers. A...

Automating Static Code Analysis through CI/CD Pipeline Integration

In the contemporary landscape of software devel-opment, securing sensitive data is paramount to safeguarding organizational reputation, preventing financial losses, and pro-tecting individuals from identity theft. This paper addresses the pervasive challenge of identifying and rectifying security...

Kaspersky-CTF-2026

Kaspersky CTF 2026 Solutions, exploits, and writeups for the...

CVE-2026-82456

argocd-mcp 0.8.0 binds its HTTP transport to every network interface and accepts MCP sessions without requiring caller credentials when ARGOCDAPITOKEN is configured. Attackers who can reach the listener can invoke the full tool surface using the operator's stored token to create applications,...

CVE-2026-82456 argocd-mcp 0.8.0 Authentication Bypass via Unauthenticated HTTP

argocd-mcp 0.8.0 binds its HTTP transport to every network interface and accepts MCP sessions without requiring caller credentials when ARGOCDAPITOKEN is configured. Attackers who can reach the listener can invoke the full tool surface using the operator's stored token to create applications,...

CVE-2026-82456 argocd-mcp 0.8.0 Authentication Bypass via Unauthenticated HTTP

argocd-mcp 0.8.0 binds its HTTP transport to every network interface and accepts MCP sessions without requiring caller credentials when ARGOCDAPITOKEN is configured. Attackers who can reach the listener can invoke the full tool surface using the operator's stored token to create applications,...

CVE-2026-82456

argocd-mcp 0.8.0 binds its HTTP transport to every network interface and accepts MCP sessions without requiring caller credentials when ARGOCDAPITOKEN is configured. Attackers who can reach the listener can invoke the full tool surface using the operator's stored token to create applications,...

EUVD-2026-68103

argocd-mcp 0.8.0 binds its HTTP transport to every network interface and accepts MCP sessions without requiring caller credentials when ARGOCDAPITOKEN is configured. Attackers who can reach the listener can invoke the full tool surface using the operator's stored token to create applications,...

CVE-2026-82456

argocd-mcp version 0.8.0 (argoproj-labs) has an authentication bypass via its unauthenticated HTTP transport. The server binds to all network interfaces and accepts MCP sessions without requiring caller credentials when the ARGOCD_API_TOKEN environment variable is configured. Any network-reachabl...