Argo Project Argo CD Software Supply Chain Vulnerabilities

The Argo Project’s Argo CD versions from 2.1.0 to 3.3.15, 3.4.0-rc1 to 3.4.10, 3.5.0-rc1 to 3.5.4, and 3.6.0-rc1 to 3.6.0-rc2 contain software supply chain vulnerability issues. This vulnerability arises when --enable-helm is enabled for kustomize builds, allowing helmGlobals.configHome to point ...