GO-2022-0453 Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd...

GO-2022-0387 Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd...

GO-2022-0358 Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd...

GO-2022-0359 Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd...

GO-2022-0357 Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd...

GO-2022-0304 Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd...

GO-2023-2085 Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd...

GO-2023-2050 Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd...

GO-2023-2049 Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd...

GO-2023-2018 Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd...

GO-2023-1952 Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd...

GO-2023-1670 Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd...

GO-2023-1577 Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd...

GO-2023-1512 Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd...

GO-2023-1520 JWT audience claim is not verified in github.com/argoproj/argo-cd

JWT audience claim is not verified in github.com/argoproj/argo-cd...

Withdrawn Advisory: Litestar has an environment Variable injection in `docs-preview.yml` workflow

Withdrawn Advisory This advisory has been withdrawn because the confidentiality, integrity, and availability impacts of the vulnerability affect Litestar's CI/CD environment rather than the litestar package. While the information in the advisory is still valid, users of the litestar package are n...

GO-2024-3002 Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Argo CD Unauthenticated Denial of Service DoS Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd...

GO-2024-3006 The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd...

The vulnerability of the declarative delivery tool for GitOps on Kubernetes Argo CD, related to deficiencies in authentication procedures, allows attackers to gain unauthorized access to protected information.

The vulnerability of GitOps’ continuous delivery tool for Kubernetes Argo CD is related to deficiencies in the authentication process when handling the final endpoint /api/v1/settings. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the ignoreDifferences configuration in the declarative delivery tool for GitOps for Kubernetes Argo CD allows a attacker to trigger a service failure.

The vulnerability of the ignoreDifferences configuration option in GitOps’ continuous delivery tool for Kubernetes Argo CD is related to an uncontrolled resource consumption when processing the jqPathExpressions parameter. Exploiting this vulnerability could allow a malicious actor to cause servi...