An open API service providing security vulnerability metadata for many open source software ecosystems.

Browse Security Advisories

High
11 months ago

Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook GSA_kwCzR0hTQS1ncHg0LTM3ZzItYzhwds4ABMys

go github.com/argoproj/argo-cd/v3, github.com/argoproj/argo-cd/v2
High
11 months ago

argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload GSA_kwCzR0hTQS13cDRwLTlweGgtY2d4Ms4ABMyX

go github.com/argoproj/argo-cd/v3, github.com/argoproj/argo-cd/v2, github.com/argoproj/argo-cd
High
11 months ago

Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload GSA_kwCzR0hTQS1mOWdxLXBycmMtaHJoY84ABMyW

go github.com/argoproj/argo-cd/v3, github.com/argoproj/argo-cd/v2, github.com/argoproj/argo-cd
Moderate
11 months ago

Repository Credentials Race Condition Crashes Argo CD Server GSA_kwCzR0hTQS1nODhwLXI0MnItcHBwOc4ABMyV

go github.com/argoproj/argo-cd/v3, github.com/argoproj/argo-cd/v2
Critical
12 months ago

Argo CD's Project API Token Exposes Repository Credentials GSA_kwCzR0hTQS03ODZxLTloY2ctdjlmZs4ABLqo

go github.com/argoproj/argo-cd/v3, github.com/argoproj/argo-cd/v2
Critical
about 1 year ago

Argo CD allows cross-site scripting on repositories page GSA_kwCzR0hTQS0yaGo1LWc2NGctZnA2cM4ABIbo

go github.com/argoproj/argo-cd/v3, github.com/argoproj/argo-cd/v2, github.com/argoproj/argo-cd
Moderate
over 1 year ago

Argo CD does not scrub secret values from patch errors GSA_kwCzR0hTQS00N2cyLXFtaDItNzQ5ds4ABD9E

go github.com/argoproj/argo-cd, github.com/argoproj/argo-cd/v2
Moderate
about 2 years ago

Unauthenticated Access to sensitive settings in Argo CD GSA_kwCzR0hTQS04N3A5LXg3NWgtcDRqMs4AA8wy

go github.com/argoproj/argo-cd/v2/server
Critical
about 2 years ago

ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache GSA_kwCzR0hTQS05NzY2LTUyNzctajVocs4AA8aY

go github.com/argoproj/argo-cd, github.com/argoproj/argo-cd/v2
Moderate
over 2 years ago

Users with `create` but not `override` privileges can perform local sync GSA_kwCzR0hTQS1nNjIzLWpjZ2ctbWhtbc4AA6Bz

go github.com/argoproj/argo-cd/v2, github.com/argoproj/argo-cd
High
over 2 years ago

github.com/argoproj/argo-cd Cross-Site Request Forgery vulnerability GSA_kwCzR0hTQS05Mm13LXEyNTYtNXZ3Z84AA4lC

go github.com/argoproj/argo-cd/v2, github.com/argoproj/argo-cd
Moderate
almost 3 years ago

Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server GSA_kwCzR0hTQS02anF3LWp3ZjUtcnA4aM4AA2HB

go github.com/argoproj/argo-cd/v2, github.com/argoproj/argo-cd
High
almost 3 years ago

Argo CD web terminal session doesn't expire GSA_kwCzR0hTQS1jOHh3LXZqZ2YtOTRocs4AA1eI

go github.com/argoproj/argo-cd/v2
Moderate
over 3 years ago

Argo CD authenticated but unauthorized users may enumerate Application names via the API GSA_kwCzR0hTQS0ycTVjLXF3OWMtZm12cc4AAyQf

go github.com/argoproj/argo-cd/v2, github.com/argoproj/argo-cd
Critical
over 3 years ago

JWT audience claim is not verified GSA_kwCzR0hTQS1xOWhyLWo0cmYtOGZqY84AAxJD

go github.com/argoproj/argo-cd
Moderate
about 4 years ago

DoS through large manifest files in Argo CD GSA_kwCzR0hTQS1qaHFwLXZmNHctcnB3cc4AAs5e

go github.com/argoproj/argo-cd/v2, github.com/argoproj/argo-cd
Moderate
about 4 years ago

Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server GSA_kwCzR0hTQS1xNHc1LTRncTItOTh2bc4AAs5a

go github.com/argoproj/argo-cd/v2, github.com/argoproj/argo-cd
Critical
about 4 years ago

Argo CD's external URLs for Deployments can include JavaScript GSA_kwCzR0hTQS1oNHc5LTZ4NzgtOHZyas4AAs5Z

go github.com/argoproj/argo-cd/v2, github.com/argoproj/argo-cd
High
about 4 years ago

Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params GSA_kwCzR0hTQS0ybTdoLTg2cXEtZnA0ds4AAs5Y

go github.com/argoproj/argo-cd/v2, github.com/argoproj/argo-cd
Critical
about 4 years ago

Argo CD will blindly trust JWT claims if anonymous access is enabled GSA_kwCzR0hTQS1yNjQyLWd2OXAtMndqas4AAqwZ

go github.com/argoproj/argo-cd, github.com/argoproj/argo-cd/v2
Moderate
about 4 years ago

Argo Exposure of Sensitive Information GSA_kwCzR0hTQS14ajd2LWM4MnctOTJxMs4AAkND

go github.com/argoproj/argo-cd
Moderate
about 4 years ago

Login screen allows message spoofing if SSO is enabled GSA_kwCzR0hTQS14bWc4LTk5cjgtamMyas4AAgd9

go github.com/argoproj/argo-cd, github.com/argoproj/argo-cd/v2
Moderate
over 4 years ago

Observable Discrepancy in Argo MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXZqNTQtY2pyeC14Njk2

go github.com/argoproj/argo-cd

Filter by Severity

Filter by Source

Filter by Ecosystem

Filter by Package

openclaw 591 moodle/moodle 437 tensorflow 433 tensorflow-cpu 409 tensorflow-gpu 398 magento/community-edition 361 org.jenkins-ci.main:jenkins-core 259 Microsoft.ChakraCore 247 github.com/mattermost/mattermost/server/v8 199 github.com/mattermost/mattermost-server 174 typo3/cms 167 Magick.NET-Q16-AnyCPU 161 Magick.NET-Q16-HDRI-AnyCPU 159 org.apache.tomcat:tomcat 157 Magick.NET-Q16-HDRI-OpenMP-arm64 154 com.liferay.portal:release.portal.bom 150 Magick.NET-Q16-HDRI-x86 150 Magick.NET-Q16-HDRI-x64 149 open-webui 147 Magick.NET-Q16-HDRI-arm64 146 Magick.NET-Q16-OpenMP-arm64 145 Magick.NET-Q16-OpenMP-x64 144 Magick.NET-Q16-x86 144 wwbn/avideo 144 Magick.NET-Q16-arm64 143 Magick.NET-Q8-AnyCPU 143 n8n 139 Magick.NET-Q8-x86 138 Magick.NET-Q16-x64 137 Magick.NET-Q8-arm64 137 Magick.NET-Q8-OpenMP-arm64 136 Magick.NET-Q8-OpenMP-x64 135 pimcore/pimcore 133 Magick.NET-Q8-x64 130 apache-airflow 128 craftcms/cms 127 dolibarr/dolibarr 126 com.liferay.portal:release.dxp.bom 125 concrete5/concrete5 121 magento/project-community-edition 120 typo3/cms-core 120 parse-server 116 flowise 112 drupal/core 107 Django 107 phpmyadmin/phpmyadmin 107 thorsten/phpmyfaq 106 microweber/microweber 105 librenms/librenms 101 org.keycloak:keycloak-services 97 code.gitea.io/gitea 94 silverstripe/framework 90 symfony/symfony 90 Magick.NET-Q16-HDRI-OpenMP-x64 86 mlflow 79 com.fasterxml.jackson.core:jackson-databind 79 github.com/usememos/memos 75 gogs.io/gogs 75 shopware/platform 74 mantisbt/mantisbt 74 drupal/drupal 72 getgrav/grav 70 salt 67 apache-superset 66 ansible 65 shopware/core 64 next 64 electron 64 github.com/grafana/grafana 62 github.com/rancher/rancher 61 Magick.NET-Q16-OpenMP-x86 61 vllm 60 org.apache.struts:struts2-core 59 actionpack 59 picklescan 59 github.com/siyuan-note/siyuan/kernel 58 directus 58 snipe/snipe-it 57 mautic/core 57 baserproject/basercms 56 django 56 nokogiri 56 org.apache.tomcat.embed:tomcat-embed-core 55 froxlor/froxlor 55 github.com/hashicorp/vault 55 Plone 54 nocodb 54 surrealdb 53 github.com/traefik/traefik/v3 51 github.com/traefik/traefik/v2 50 admidio/admidio 50 rack 50 org.keycloak:keycloak-core 50 gradio 49 pyload-ng 48 perl 48 nova 48 aiohttp 47 getkirby/cms 47 hono 47 org.xwiki.platform:xwiki-platform-oldcore 46 matrix-synapse 45 DBD-SQLite 45 vyper 44 org.elasticsearch:elasticsearch 44 statamic/cms 43 rdiffweb 43 axios 43 vm2 43 nilsteampassnet/teampass 42 pillow 42 showdoc/showdoc 42 k8s.io/kubernetes 42 plone 41 github.com/filebrowser/filebrowser/v2 41 @budibase/server 41 ghost 41 phpmyfaq/phpmyfaq 41 intelliants/subrion 41 pypdf 39 io.undertow:undertow-core 39 wasmtime 39 keystone 39 praisonai 39 net.mingsoft:ms-mcms 39 github.com/zitadel/zitadel 38 github.com/mattermost/mattermost-server/v6 38 com.thoughtworks.xstream:xstream 37 PraisonAI 37 MT 37 github.com/cilium/cilium 37 github.com/argoproj/argo-cd/v2 37 ci4-cms-erp/ci4ms 36 com.jfinal:jfinal 36 deno 36 DotNetNuke.Core 36 undici 35 moin 35 github.com/answerdev/answer 34 org.jenkins-ci.plugins:script-security 34 github.com/hashicorp/nomad 34 code.vikunja.io/api 33 shopware/shopware 33 org.apache.tomcat:tomcat-catalina 33 contao/core-bundle 33 praisonaiagents 33 github.com/docker/docker 33 kimai/kimai 33 Pillow 33 langflow 32 github.com/argoproj/argo-cd 32 github.com/hashicorp/consul 32 zendframework/zendframework1 32 phpoffice/phpspreadsheet 31 org.opencms:opencms-core 31 prestashop/prestashop 31 yeswiki/yeswiki 31 opencv-python 31 opencv-contrib-python 31 org.springframework.security:spring-security-core 30 pocketmine/pocketmine-mp 30 org.apache.solr:solr-core 30 litellm 29 org.eclipse.jetty:jetty-server 29 pnpm 28 dompurify 28 @anthropic-ai/claude-code 28 flowise-components 28 github.com/fleetdm/fleet/v4 28 github.com/traefik/traefik 28 mediawiki/core 28 zebrad 27 centreon/centreon 27 github.com/nats-io/nats-server/v2 27 github.com/coder/coder/v2 26 pgadmin4 26 github.com/openbao/openbao 26 openmage/magento-lts 26 funadmin/funadmin 26 cockpit-hq/cockpit 26 github.com/ethereum/go-ethereum 26 org.keycloak:keycloak-parent 26 github.com/openfga/openfga 26 facturascripts/facturascripts 26 org.apache.openmeetings:openmeetings-parent 25 rubygems-update 25 laravel/framework 25 openssl-src 25 golang.org/x/crypto 25 astro 25 grumpydictator/firefly-iii 25 GitPython 25 twig/twig 24 org.springframework:spring-webmvc 24 org.bouncycastle:bcprov-jdk14 24 cryptography 24 openbabel 24 typo3/cms-backend 23 github.com/goharbor/harbor 23 weblate 23

Filter by Repository

https://github.com/tensorflow/tensorflow 433 https://github.com/moodle/moodle 250 https://github.com/xwiki/xwiki-platform 222 https://github.com/chakra-core/ChakraCore 214 https://github.com/jenkinsci/jenkins 178 https://github.com/liferay/liferay-portal 170 https://github.com/django/django 121 https://github.com/jquery/jquery 118 https://github.com/apache/tomcat 118 https://github.com/pimcore/pimcore 116 https://github.com/apache/airflow 105 https://github.com/TYPO3/typo3 93 https://github.com/keycloak/keycloak 90 https://github.com/microweber/microweber 90 https://github.com/librenms/librenms 77 https://github.com/rails/rails 70 https://github.com/FasterXML/jackson-databind 70 https://github.com/thorsten/phpmyfaq 69 https://github.com/silverstripe/silverstripe-framework 68 https://github.com/usememos/memos 68 https://github.com/kubernetes/kubernetes 66 https://github.com/symfony/symfony 64 https://github.com/Dolibarr/dolibarr 60 https://github.com/mattermost/mattermost 59 https://github.com/ansible/ansible 59 https://github.com/python-pillow/Pillow 52 https://github.com/spring-projects/spring-framework 51 https://github.com/argoproj/argo-cd 50 https://github.com/apache/struts 47 https://github.com/grafana/grafana 47 https://github.com/rancher/rancher 46 https://github.com/mautic/mautic 46 https://github.com/phpmyadmin/phpmyadmin 45 https://github.com/concretecms/concretecms 44 https://github.com/vyperlang/vyper 44 https://github.com/mantisbt/mantisbt 42 https://github.com/saltstack/salt 42 https://github.com/shopware/platform 42 https://github.com/ikus060/rdiffweb 42 https://github.com/craftcms/cms 41 https://github.com/directus/directus 41 https://github.com/shopware/shopware 40 https://github.com/mmaitre314/picklescan 39 https://github.com/star7th/showdoc 39 https://github.com/magento/magento2 38 https://github.com/gradio-app/gradio 38 https://github.com/dotnet/runtime 38 https://github.com/openstack/nova 38 https://github.com/erlang/otp 37 https://github.com/x-stream/xstream 37 https://github.com/plone/Products.CMFPlone 37 https://github.com/octobercms/october 36 https://github.com/mlflow/mlflow 36 https://github.com/sparklemotion/nokogiri 35 https://github.com/umbraco/Umbraco-CMS 35 https://github.com/answerdev/answer 34 https://github.com/apache/activemq 34 https://github.com/parse-community/parse-server 34 https://github.com/matrix-org/synapse 32 https://github.com/go-gitea/gitea 32 https://github.com/opencv/opencv 32 https://github.com/cilium/cilium 31 https://github.com/PaddlePaddle/Paddle 31 https://github.com/apache/inlong 31 https://github.com/contao/contao 30 https://github.com/snipe/snipe-it 30 https://github.com/rack/rack 29 https://github.com/strapi/strapi 28 https://github.com/openstack/keystone 28 https://github.com/CVEProject/cvelist 28 https://github.com/gogs/gogs 28 https://github.com/electron/electron 28 https://github.com/FlowiseAI/Flowise 28 https://github.com/netty/netty 27 https://github.com/froxlor/froxlor 26 https://github.com/github/advisory-database 26 https://github.com/Perl/perl5 26 https://github.com/zitadel/zitadel 26 https://github.com/geoserver/geoserver 26 https://github.com/apache/nifi 26 https://github.com/baserproject/basercms 26 https://github.com/bcgit/bc-java 25 https://github.com/surrealdb/surrealdb 25 https://github.com/vllm-project/vllm 25 https://github.com/langchain-ai/langchain 25 https://github.com/denoland/deno 25 https://github.com/traefik/traefik 25 https://github.com/pmmp/PocketMine-MP 25 https://github.com/vercel/next.js 25 https://github.com/apache/cxf 24 https://github.com/run-llama/llama_index 24 https://github.com/getgrav/grav 24 https://github.com/hashicorp/consul 24 https://github.com/pyload/pyload 24 https://github.com/firefly-iii/firefly-iii 23 https://github.com/dnnsoftware/Dnn.Platform 23 https://github.com/moby/moby 23 https://github.com/TYPO3/TYPO3.CMS 23 https://github.com/eclipse/jetty.project 23 https://github.com/livehelperchat/livehelperchat 23 https://github.com/bytecodealliance/wasmtime 23 https://github.com/nilsteampassnet/TeamPass 23 https://github.com/PrestaShop/PrestaShop 23 https://github.com/getkirby/kirby 22 https://github.com/helm/helm 22 https://github.com/nervosnetwork/ckb 22 https://github.com/jenkinsci/script-security-plugin 22 https://github.com/PHPOffice/PhpSpreadsheet 22 https://github.com/laravel/framework 21 https://github.com/hashicorp/vault 21 https://github.com/goharbor/harbor 21 https://github.com/undertow-io/undertow 21 https://github.com/OpenZeppelin/openzeppelin-contracts 21 https://github.com/OpenNMS/opennms 20 https://github.com/jeecgboot/jeecg-boot 20 https://github.com/funadmin/funadmin 20 https://github.com/opencast/opencast 20 https://github.com/ethyca/fides 20 https://github.com/backstage/backstage 19 https://github.com/TYPO3-CMS/core 19 https://github.com/nilsteampassnet/teampass 19 https://github.com/simplesamlphp/simplesamlphp 19 https://github.com/alkacon/opencms-core 19 https://github.com/huggingface/transformers 19 https://github.com/cloudfoundry/uaa 19 https://github.com/containerd/containerd 19 https://github.com/intelliants/subrion 19 https://github.com/rubygems/rubygems 18 https://github.com/OpenMage/magento-lts 18 https://github.com/vaadin/platform 18 https://github.com/opencontainers/runc 18 https://github.com/apache/camel 18 https://github.com/vantage6/vantage6 17 https://github.com/ethereum/go-ethereum 17 https://github.com/openfga/openfga 17 https://github.com/apache/kylin 17 https://github.com/liufee/cms 17 https://github.com/mindsdb/mindsdb 17 https://github.com/rusqlite/rusqlite 16 https://github.com/sequelize/sequelize 16 https://github.com/pyca/cryptography 16 https://github.com/yetiforcecompany/yetiforcecrm 16 https://github.com/hashicorp/nomad 16 https://github.com/quarkusio/quarkus 16 https://github.com/etcd-io/etcd 16 https://github.com/twbs/bootstrap 16 https://github.com/forkcms/forkcms 16 https://github.com/tinymce/tinymce 16 https://github.com/vitejs/vite 16 https://github.com/dotnet/aspnetcore 16 https://github.com/aio-libs/aiohttp 15 https://github.com/drupal/core 15 https://github.com/nodejs/undici 15 https://github.com/centreon/centreon 15 https://github.com/ckeditor/ckeditor4 15 https://github.com/puppetlabs/puppet 15 https://github.com/cobbler/cobbler 15 https://github.com/MobSF/Mobile-Security-Framework-MobSF 15 https://github.com/thorsten/phpMyFAQ 15 https://github.com/xuxueli/xxl-job 15 https://github.com/containers/podman 15 https://github.com/decidim/decidim 15 https://github.com/OPCFoundation/UA-.NETStandard 15 https://github.com/zendframework/zendframework 15 https://github.com/PHPMailer/PHPMailer 15 https://github.com/dompdf/dompdf 15 https://github.com/spring-projects/spring-security 15 https://github.com/sqlite/sqlite 15 https://github.com/publify/publify 14 https://github.com/twisted/twisted 14 https://github.com/apache/superset 14 https://github.com/cockpit-hq/cockpit 14 https://github.com/Graylog2/graylog2-server 14 https://github.com/mojolicious/mojo 14 https://github.com/janeczku/calibre-web 14 https://github.com/dpgaspar/Flask-AppBuilder 14 https://github.com/ming-soft/MCMS 14 https://github.com/rails/rails-html-sanitizer 14 https://github.com/TryGhost/Ghost 14 https://github.com/urllib3/urllib3 14 https://github.com/apache/zeppelin 14 https://github.com/cosmos/cosmos-sdk 14 https://github.com/pimcore/admin-ui-classic-bundle 14 https://github.com/golang/go 14 https://github.com/pgadmin-org/pgadmin4 14 https://github.com/ImageMagick/ImageMagick 14 https://github.com/openbao/openbao 13 https://github.com/dromara/hutool 13 https://sourceforge.net/projects/sourceforge.net 13 https://github.com/zenml-io/zenml 13 https://github.com/h2oai/h2o-3 13 https://github.com/laurent22/joplin 13 https://github.com/1Panel-dev/1Panel 13 https://github.com/modoboa/modoboa 13 https://github.com/apache/dolphinscheduler 13 https://github.com/OctoPrint/OctoPrint 13 https://github.com/OpenRefine/OpenRefine 13 https://github.com/swagger-api/swagger-ui 13 https://github.com/perl5-dbi/dbi 13