EUVD-2022-0764

Malicious code in bioql PyPI...

GHSA-JHQP-VF4W-RPWQ DoS through large manifest files in Argo CD

Impact All versions of Argo CD starting with v0.7.0 are vulnerable to an uncontrolled memory consumption bug, allowing an authorized malicious user to crash the repo-server service. The repo-server is a critical component of Argo CD, so crashing the repo-server effectively denies core Argo CD...