Affected by GO-2022-0304 and 30 other vulnerabilities

GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

The highest tagged major version is v2.

commands

package

v1.8.7 Latest Latest Go to latest Published: Mar 3, 2021 License: Apache-2.0 Imports: 59 Imported by: 2

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/argoproj/argo-cd

Links

Open Source Insights

Documentation ¶

Index ¶

func NewAppsCommand() *cobra.Command
func NewClusterConfig() *cobra.Command
func NewCommand() *cobra.Command
func NewDiffReconcileResults() *cobra.Command
func NewExportCommand() *cobra.Command
func NewGenDexConfigCommand() *cobra.Command
func NewImportCommand() *cobra.Command
func NewProjectAllowListGenCommand() *cobra.Command
func NewProjectsCommand() *cobra.Command
func NewReconcileCommand() *cobra.Command
func NewResourceActionListCommand(cmdCtx commandContext) *cobra.Command
func NewResourceActionRunCommand(cmdCtx commandContext) *cobra.Command
func NewResourceHealthCommand(cmdCtx commandContext) *cobra.Command
func NewResourceIgnoreDifferencesCommand(cmdCtx commandContext) *cobra.Command
func NewResourceOverridesCommand(cmdCtx commandContext) *cobra.Command
func NewRunDexCommand() *cobra.Command
func NewSettingsCommand() *cobra.Command
func NewUpdatePolicyRuleCommand() *cobra.Command
func NewValidateSettingsCommand(cmdCtx commandContext) *cobra.Command

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func NewAppsCommand ¶ added in v1.7.0

func NewAppsCommand() *cobra.Command

func NewClusterConfig ¶ added in v1.8.0

func NewClusterConfig() *cobra.Command

NewClusterConfig returns a new instance of `argocd-util kubeconfig` command

func NewCommand ¶ added in v1.8.0

func NewCommand() *cobra.Command

NewCommand returns a new instance of an argocd command

func NewDiffReconcileResults ¶ added in v1.7.0

func NewDiffReconcileResults() *cobra.Command

func NewExportCommand ¶ added in v1.8.0

func NewExportCommand() *cobra.Command

NewExportCommand defines a new command for exporting Kubernetes and Argo CD resources.

func NewGenDexConfigCommand ¶ added in v1.8.0

func NewGenDexConfigCommand() *cobra.Command

func NewImportCommand ¶ added in v1.8.0

func NewImportCommand() *cobra.Command

NewImportCommand defines a new command for exporting Kubernetes and Argo CD resources.

func NewProjectAllowListGenCommand ¶ added in v1.8.0

func NewProjectAllowListGenCommand() *cobra.Command

NewProjectAllowListGenCommand generates a project from clusterRole

func NewProjectsCommand ¶

func NewProjectsCommand() *cobra.Command

func NewReconcileCommand ¶ added in v1.7.0

func NewReconcileCommand() *cobra.Command

func NewResourceActionListCommand ¶ added in v1.6.0

func NewResourceActionListCommand(cmdCtx commandContext) *cobra.Command

func NewResourceActionRunCommand ¶ added in v1.6.0

func NewResourceActionRunCommand(cmdCtx commandContext) *cobra.Command

func NewResourceHealthCommand ¶

func NewResourceHealthCommand(cmdCtx commandContext) *cobra.Command

func NewResourceIgnoreDifferencesCommand ¶

func NewResourceIgnoreDifferencesCommand(cmdCtx commandContext) *cobra.Command

func NewResourceOverridesCommand ¶

func NewResourceOverridesCommand(cmdCtx commandContext) *cobra.Command

func NewRunDexCommand ¶ added in v1.8.0

func NewRunDexCommand() *cobra.Command

func NewSettingsCommand ¶

func NewSettingsCommand() *cobra.Command

func NewUpdatePolicyRuleCommand ¶

func NewUpdatePolicyRuleCommand() *cobra.Command

func NewValidateSettingsCommand ¶

func NewValidateSettingsCommand(cmdCtx commandContext) *cobra.Command

Types ¶

This section is empty.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL