Browse CVEs

CRITICAL 9.1 CVE-2024-21662 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Prior to versions 2.8.13, 2.9.9, and 2.10.4, an attacker can effectively by… Argo Cd 2.8.13 / 2.9.9+ Fix from $2,3002024-03-18 HIGH 7.5 CVE-2024-21661 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Prior to versions 2.8.13, 2.9.9, and 2.10.4, an attacker can exploit a crit… Argo Cd 2.8.13 / 2.9.9+ Fix from $1,9502024-03-18 CRITICAL 9.8 CVE-2024-21652 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Prior to versions 2.8.13, 2.9.9, and 2.10.4, an attacker can exploit a chai… Argo Cd 2.8.13 / 2.9.9+ Fix from $2,3002024-03-18 MEDIUM 5.4 CVE-2024-28175 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Due to the improper URL protocols filtering of links specified in the `link… Argo Cd 2.8.12 / 2.9.8+ Fix from $1,6002024-03-13 MEDIUM 6.4 CVE-2023-50726 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. "Local sync" is an Argo CD feature that allows developers to temporarily ov… Argo Cd 2.8.12 / 2.9.7+ Fix from $1,6002024-03-13 HIGH 8.3 CVE-2024-22424 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. The Argo CD API prior to versions 2.10-rc2, 2.9.4, 2.8.8, and 2.7.15 are vu… Argo Cd 2.7.16 / 2.8.8+ Fix from $1,9502024-01-19 MEDIUM 6.5 CVE-2023-40584 Argo CD is a declarative continuous deployment for Kubernetes. All versions of ArgoCD starting from v2.4 have a bug where the ArgoCD repo-server comp… Argo Cd 2.6.15 / 2.7.14+ Fix from $1,6002023-09-07 CRITICAL 9.6 CVE-2023-40029 Argo CD is a declarative continuous deployment for Kubernetes. Argo CD Cluster secrets might be managed declaratively using Argo CD / kubectl apply. … Argo Cd 2.6.15 / 2.7.14+ Fix from $2,3002023-09-07 HIGH 7.1 CVE-2023-40025 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of Argo CD starting from version 2.6.0 have a bug where open w… Argo Cd after 2.6.13 Fix from $1,9502023-08-23 HIGH 8.5 CVE-2023-23947 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All Argo CD versions starting with 2.3.0-rc1 and prior to 2.3.17, 2.4.23 2… Argo Cd 2.3.17 / 2.4.23+ Fix from $1,9502023-02-16 MEDIUM 6.5 CVE-2023-25163 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of Argo CD starting with v2.6.0-rc1 have an output sanitizatio… Argo Cd Patch available Fix from $1,6002023-02-08 HIGH 8.5 CVE-2023-22736 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions starting with 2.5.0-rc1 and above, prior to 2.5.8, and version 2.6… Argo Cd 2.5.8+ Fix from $1,9502023-01-26 HIGH 8.8 CVE-2023-22482 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions of Argo CD starting with v1.8.2 and prior to 2.3.13, 2.4.19, 2.5.6… Argo Cd 2.3.14 / 2.4.20+ Fix from $1,9502023-01-26 CRITICAL 9.6 CVE-2022-31105 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD starting with version 0.4.0 and prior to 2.2.11, 2.3.6, and 2.4.5 i… Argo Cd 2.2.11 / 2.3.6+ Fix from $2,3002022-07-12 MEDIUM 6.1 CVE-2022-31102 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD starting with 2.3.0 and prior to 2.3.6 and 2.4.5 is vulnerable to a… Argo Cd 2.3.6 / 2.4.5+ Fix from $1,6002022-07-12 HIGH 8.8 CVE-2022-1025 All unpatched versions of Argo CD starting with v1.0.0 are vulnerable to an improper access control bug, allowing a malicious user to potentially esc… Argo Cd after 2.3.1 Fix from $1,9502022-07-12 HIGH 8.1 CVE-2022-31034 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of Argo CD starting with v0.11.0 are vulnerable to a variety o… Argo Cd 2.1.16+ Fix from $1,9502022-06-27 MEDIUM 5.4 CVE-2022-31035 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of Argo CD starting with v1.0.0 are vulnerable to a cross-site… Argo Cd 2.1.16+ Fix from $1,6002022-06-27 MEDIUM 6.5 CVE-2022-31016 Argo CD is a declarative continuous deployment for Kubernetes. Argo CD versions v0.7.0 and later are vulnerable to an uncontrolled memory consumption… Argo Cd 2.1.16 / 2.2.10+ Fix from $1,6002022-06-25 CRITICAL 10.0 CVE-2022-29165 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. A critical vulnerability has been discovered in Argo CD starting with versi… Argo Cd 2.1.15 / 2.2.9+ Fix from $2,3002022-05-20 HIGH 7.1 CVE-2022-29164 Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. In affected versions an attacker can… Argo Workflows 3.2.11 / 3.3.5+ Fix from $1,9502022-05-06 HIGH 8.8 CVE-2022-24768 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All unpatched versions of Argo CD starting with 1.0.0 are vulnerable to an … Argo Cd 2.1.14 / 2.2.8+ Fix from $1,9502022-03-23 MEDIUM 6.5 CVE-2022-24730 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD starting with version 1.3.0 but before versions 2.1.11, 2.2.6, and … Argo Cd 2.1.11 / 2.2.6+ Fix from $1,6002022-03-23 HIGH 7.7 CVE-2022-24348 Argo CD before 2.1.9 and 2.2.x before 2.2.4 allows directory traversal related to Helm charts because of an error in helmTemplate in repository.go. F… Argo Cd 2.1.9 / 2.2.4+ Fix from $1,9502022-02-04 MEDIUM 6.5 CVE-2021-37914 In Argo Workflows through 3.1.3, if EXPRESSION_TEMPLATES is enabled and untrusted users are allowed to specify input parameters when running workflow… Argo Workflows after 3.1.3 Fix from $1,6002021-08-03 MEDIUM 5.5 CVE-2021-23135 Exposure of System Data to an Unauthorized Control Sphere vulnerability in web UI of Argo CD allows attacker to cause leaked secret data into web UI … Argo Cd 1.7.14 / 1.8.7+ Fix from $1,6002021-05-12 HIGH 7.5 CVE-2021-26923 An issue was discovered in Argo CD before 1.8.4. Accessing the endpoint /api/version leaks internal information for the system, and this endpoint is … Argo Cd 1.7.12 / 1.8.4+ Fix from $1,9502021-03-15 MEDIUM 6.1 CVE-2021-26924 An issue was discovered in Argo CD before 1.8.4. Browser XSS protection is not activated due to the missing XSS protection header. Argo Cd 1.7.12 / 1.8.4+ Fix from $1,6002021-03-15 MEDIUM 6.5 CVE-2021-26921 In util/session/sessionmanager.go in Argo CD before 1.8.4, tokens continue to work even when the user account is disabled. Argo Cd 1.7.12 / 1.8.4+ Fix from $1,6002021-02-09 MEDIUM 6.5 CVE-2018-21034 In Argo versions prior to v1.5.0-rc1, it was possible for authenticated Argo users to submit API calls to retrieve secrets and other manifests which … Argo Cd after 1.4.2 Fix from $1,6002020-04-09