github.com/argoproj/argo-cd
go · Repository · Package
Security Advisories for github.com/argoproj/argo-cd in go
High
2 days ago
argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload
go
github.com/argoproj/argo-cd/v3, github.com/argoproj/argo-cd/v2, github.com/argoproj/argo-cd
High
2 days ago
Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload
go
github.com/argoproj/argo-cd/v3, github.com/argoproj/argo-cd/v2, github.com/argoproj/argo-cd
Critical
4 months ago
Argo CD allows cross-site scripting on repositories page
go
github.com/argoproj/argo-cd/v3, github.com/argoproj/argo-cd/v2, github.com/argoproj/argo-cd
High
about 1 year ago
Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint
go
github.com/argoproj/argo-cd/v2, github.com/argoproj/argo-cd
Moderate
over 1 year ago
Argo-cd authenticated users can enumerate clusters by name
go
github.com/argoproj/argo-cd
Critical
over 1 year ago
ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache
go
github.com/argoproj/argo-cd, github.com/argoproj/argo-cd/v2
High
over 1 year ago
Denial of Service (DoS) Vulnerability Due to Unsafe Array Modification in Multi-threaded Environment
go
github.com/argoproj/argo-cd/v2, github.com/argoproj/argo-cd
Moderate
over 1 year ago
Users with `create` but not `override` privileges can perform local sync
go
github.com/argoproj/argo-cd/v2, github.com/argoproj/argo-cd
High
over 1 year ago
github.com/argoproj/argo-cd Cross-Site Request Forgery vulnerability
go
github.com/argoproj/argo-cd/v2, github.com/argoproj/argo-cd
Moderate
about 2 years ago
Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server
go
github.com/argoproj/argo-cd/v2, github.com/argoproj/argo-cd
Moderate
over 2 years ago
Argo CD authenticated but unauthorized users may enumerate Application names via the API
go
github.com/argoproj/argo-cd/v2, github.com/argoproj/argo-cd
Critical
over 2 years ago
Users with any cluster secret update access may update out-of-bounds cluster secrets
go
github.com/argoproj/argo-cd
High
about 3 years ago
Argo CD improper access control bug can allow malicious user to escalate privileges to admin level
go
github.com/argoproj/argo-cd/v2, github.com/argoproj/argo-cd
Low
about 3 years ago
Argo CD SSO users vulnerable to Cross-site Scripting
go
github.com/argoproj/argo-cd
High
about 3 years ago
Argo CD certificate verification is skipped for connections to OIDC providers
go
github.com/argoproj/argo-cd
Moderate
over 3 years ago
DoS through large manifest files in Argo CD
go
github.com/argoproj/argo-cd/v2, github.com/argoproj/argo-cd
Moderate
over 3 years ago
Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server
go
github.com/argoproj/argo-cd/v2, github.com/argoproj/argo-cd
Critical
over 3 years ago
Argo CD's external URLs for Deployments can include JavaScript
go
github.com/argoproj/argo-cd/v2, github.com/argoproj/argo-cd
High
over 3 years ago
Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params
go
github.com/argoproj/argo-cd/v2, github.com/argoproj/argo-cd
Critical
over 3 years ago
Argo CD will blindly trust JWT claims if anonymous access is enabled
go
github.com/argoproj/argo-cd, github.com/argoproj/argo-cd/v2
Moderate
over 3 years ago
Login screen allows message spoofing if SSO is enabled
go
github.com/argoproj/argo-cd, github.com/argoproj/argo-cd/v2
Critical
over 3 years ago
Improper access control allows admin privilege escalation in Argo CD
go
github.com/argoproj/argo-cd
Moderate
over 3 years ago
Path traversal allows leaking out-of-bound files from Argo CD repo-server
go
github.com/argoproj/argo-cd
High
over 3 years ago
Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server
go
github.com/argoproj/argo-cd
High
about 4 years ago
Improper Restriction of Excessive Authentication Attempts in Argo API
go
github.com/argoproj/argo-cd
High
about 4 years ago
Argo CD Insecure default administrative password
go
github.com/argoproj/argo-cd
Moderate
over 4 years ago
Helm OCI credentials leaked into Argo CD logs
go
github.com/argoproj/argo-cd