2242 matches found
EUVD-2025-24649
Malicious code in bioql PyPI...
EUVD-2021-30137
Malicious code in bioql PyPI...
EUVD-2022-29036
Malicious code in bioql PyPI...
EUVD-2022-15465
Malicious code in bioql PyPI...
EUVD-2023-57913
Malicious code in bioql PyPI...
EUVD-2023-49580
Malicious code in bioql PyPI...
EUVD-2024-41284
Malicious code in bioql PyPI...
EUVD-2025-24303
Malicious code in bioql PyPI...
EUVD-2024-34741
Malicious code in bioql PyPI...
EUVD-2025-30892
Malicious code in bioql PyPI...
EUVD-2025-24305
Malicious code in bioql PyPI...
EUVD-2025-24265
Malicious code in bioql PyPI...
EUVD-2025-27898
Malicious code in bioql PyPI...
EUVD-2021-29747
Malicious code in bioql PyPI...
SUSE CVE-2025-59537
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions 1.2.0 through 1.8.7, 2.0.0-rc1 through 2.14.19, 3.0.0-rc1 through 3.2.0-rc1, 3.1.7 and 3.0.18 are vulnerable to malicious API requests which can crash the API server and cause denial of service to legitimate client...
SUSE CVE-2025-59538
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. For versions 2.9.0-rc1 through 2.14.19, 3.0.0-rc1 through 3.2.0-rc1, 3.1.6 and 3.0.17, when the webhook.azuredevops.username and webhook.azuredevops.password are not set in the default configuration, the /api/webhook endpoi...
CVE-2025-59538 Argo CD is Vulnerable to Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. For versions 2.9.0-rc1 through 2.14.19, 3.0.0-rc1 through 3.2.0-rc1, 3.1.6 and 3.0.17, when the webhook.azuredevops.username and webhook.azuredevops.password are not set in the default configuration, the /api/webhook endpoi...
Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook
Summary In the default configuration, webhook.azuredevops.username and webhook.azuredevops.password not set, Argo CD’s /api/webhook endpoint crashes the entire argocd-server process when it receives an Azure DevOps Push event whose JSON array resource.refUpdates is empty. The slice index 0 is...
GHSA-GPX4-37G2-C8PV Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook
Summary In the default configuration, webhook.azuredevops.username and webhook.azuredevops.password not set, Argo CD’s /api/webhook endpoint crashes the entire argocd-server process when it receives an Azure DevOps Push event whose JSON array resource.refUpdates is empty. The slice index 0 is...
Improper Validation of Function Hook Arguments
Overview Affected versions of this package are vulnerable to Improper Validation of Function Hook Arguments in the /api/webhook endpoint via the affectedRevisionInfo function. An attacker can cause the server process to crash and disrupt service availability by sending a Gogs push event whose JSO...