Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

go

github.com/argoproj/argo-cd/v3

go

View on github.com · View on proxy.golang.org

Security Advisories for github.com/argoproj/argo-cd/v3 in go

Critical
13 days ago

Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks GSA_kwCzR0hTQS1mbXhxLWNncDgtODd3cM4AB9Xa

go github.com/argoproj/argo-cd/v3, github.com/argoproj/argo-cd/v2
High
19 days ago

Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL GSA_kwCzR0hTQS1qNmN3LWc2cDQtN2hjaM4AB8Nr

go github.com/argoproj/argo-cd/v3, github.com/argoproj/argo-cd/v2
High
5 months ago

Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation GSA_kwCzR0hTQS1oOThyLXd2M2gtZnIzOM4ABXGy

go github.com/argoproj/argo-cd, github.com/argoproj/argo-cd/v2, github.com/argoproj/argo-cd/v3
Moderate
5 months ago

Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations GSA_kwCzR0hTQS1yZzNnLTRydzktZ3FycM4ABXGx

go github.com/argoproj/argo-cd/v3
Critical
6 months ago

ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction GSA_kwCzR0hTQS0zdjNtLXdjNnYteDR4M84ABWXo

go github.com/argoproj/argo-cd/v3
High
about 1 year ago

Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook GSA_kwCzR0hTQS1ncHg0LTM3ZzItYzhwds4ABMys

go github.com/argoproj/argo-cd/v3, github.com/argoproj/argo-cd/v2
High
about 1 year ago

argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload GSA_kwCzR0hTQS13cDRwLTlweGgtY2d4Ms4ABMyX

go github.com/argoproj/argo-cd/v3, github.com/argoproj/argo-cd/v2, github.com/argoproj/argo-cd
High
about 1 year ago

Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload GSA_kwCzR0hTQS1mOWdxLXBycmMtaHJoY84ABMyW

go github.com/argoproj/argo-cd/v3, github.com/argoproj/argo-cd/v2, github.com/argoproj/argo-cd
Moderate
about 1 year ago

Repository Credentials Race Condition Crashes Argo CD Server GSA_kwCzR0hTQS1nODhwLXI0MnItcHBwOc4ABMyV

go github.com/argoproj/argo-cd/v3, github.com/argoproj/argo-cd/v2
Critical
about 1 year ago

Argo CD's Project API Token Exposes Repository Credentials GSA_kwCzR0hTQS03ODZxLTloY2ctdjlmZs4ABLqo

go github.com/argoproj/argo-cd/v3, github.com/argoproj/argo-cd/v2
Critical
over 1 year ago

Argo CD allows cross-site scripting on repositories page GSA_kwCzR0hTQS0yaGo1LWc2NGctZnA2cM4ABIbo

go github.com/argoproj/argo-cd/v3, github.com/argoproj/argo-cd/v2, github.com/argoproj/argo-cd
Potential
Moderate
over 1 year ago

Argo CD GitOps Engine does not scrub secret values from patch errors GSA_kwCzR0hTQS0yNzR2LW1nY3YtY204as4ABD9A

go github.com/argoproj/gitops-engine
Potential
Moderate
over 2 years ago

Unauthenticated Access to sensitive settings in Argo CD GSA_kwCzR0hTQS04N3A5LXg3NWgtcDRqMs4AA8wy

go github.com/argoproj/argo-cd/v2/server

Match affected ranges for this package. Potential advisories inferred from related packages are excluded.

Filter by Severity

High 5 Moderate 4 Critical 4