apiclient

Sep 16, 2024

Changes in this version

type ManifestResponse

+ Commands []string

+ func (m *ManifestResponse) GetCommands() []string

type UpdateRevisionForPathsRequest

+ NoRevisionCache bool

+ func (m *UpdateRevisionForPathsRequest) GetNoRevisionCache() bool

type UpdateRevisionForPathsResponse

+ Revision string

+ func (m *UpdateRevisionForPathsResponse) GetRevision() string

Aug 5, 2024

Changes in this version

type GitDirectoriesRequest

+ VerifyCommit bool

+ func (m *GitDirectoriesRequest) GetVerifyCommit() bool

type GitFilesRequest

+ VerifyCommit bool

+ func (m *GitFilesRequest) GetVerifyCommit() bool

Nov 5, 2024

Changes in this version

type ManifestRequest

+ InstallationID string

+ func (m *ManifestRequest) GetInstallationID() string

type UpdateRevisionForPathsRequest

+ InstallationID string

+ func (m *UpdateRevisionForPathsRequest) GetInstallationID() string

Jul 22, 2024 GO-2024-3006

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jul 15, 2024 GO-2024-3002 +1 more

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jul 2, 2024 GO-2024-3002 +1 more

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jun 6, 2024 GO-2024-3002 +1 more

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

May 23, 2024 GO-2024-2898 +3 more

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

May 21, 2024 GO-2024-2898 +3 more

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

May 7, 2024 GO-2024-2877 +4 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Changes in this version

type RepoServerServiceClient

+ UpdateRevisionForPaths func(ctx context.Context, in *UpdateRevisionForPathsRequest, ...) (*UpdateRevisionForPathsResponse, error)

type RepoServerServiceServer

+ UpdateRevisionForPaths func(context.Context, *UpdateRevisionForPathsRequest) (*UpdateRevisionForPathsResponse, error)

type ResolveRevisionRequest

+ SourceIndex int64

+ func (m *ResolveRevisionRequest) GetSourceIndex() int64

type UnimplementedRepoServerServiceServer

+ func (*UnimplementedRepoServerServiceServer) UpdateRevisionForPaths(ctx context.Context, req *UpdateRevisionForPathsRequest) (*UpdateRevisionForPathsResponse, error)

+ type UpdateRevisionForPathsRequest struct

+ ApiVersions []string

+ AppLabelKey string

+ AppName string

+ ApplicationSource *v1alpha1.ApplicationSource

+ HasMultipleSources bool

+ KubeVersion string

+ Namespace string

+ Paths []string

+ RefSources map[string]*v1alpha1.RefTarget

+ Repo *v1alpha1.Repository

+ Revision string

+ SyncedRevision string

+ TrackingMethod string

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*UpdateRevisionForPathsRequest) Descriptor() ([]byte, []int)

+ func (*UpdateRevisionForPathsRequest) ProtoMessage()

+ func (m *UpdateRevisionForPathsRequest) GetApiVersions() []string

+ func (m *UpdateRevisionForPathsRequest) GetAppLabelKey() string

+ func (m *UpdateRevisionForPathsRequest) GetAppName() string

+ func (m *UpdateRevisionForPathsRequest) GetApplicationSource() *v1alpha1.ApplicationSource

+ func (m *UpdateRevisionForPathsRequest) GetHasMultipleSources() bool

+ func (m *UpdateRevisionForPathsRequest) GetKubeVersion() string

+ func (m *UpdateRevisionForPathsRequest) GetNamespace() string

+ func (m *UpdateRevisionForPathsRequest) GetPaths() []string

+ func (m *UpdateRevisionForPathsRequest) GetRefSources() map[string]*v1alpha1.RefTarget

+ func (m *UpdateRevisionForPathsRequest) GetRepo() *v1alpha1.Repository

+ func (m *UpdateRevisionForPathsRequest) GetRevision() string

+ func (m *UpdateRevisionForPathsRequest) GetSyncedRevision() string

+ func (m *UpdateRevisionForPathsRequest) GetTrackingMethod() string

+ func (m *UpdateRevisionForPathsRequest) Marshal() (dAtA []byte, err error)

+ func (m *UpdateRevisionForPathsRequest) MarshalTo(dAtA []byte) (int, error)

+ func (m *UpdateRevisionForPathsRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *UpdateRevisionForPathsRequest) Reset()

+ func (m *UpdateRevisionForPathsRequest) Size() (n int)

+ func (m *UpdateRevisionForPathsRequest) String() string

+ func (m *UpdateRevisionForPathsRequest) Unmarshal(dAtA []byte) error

+ func (m *UpdateRevisionForPathsRequest) XXX_DiscardUnknown()

+ func (m *UpdateRevisionForPathsRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *UpdateRevisionForPathsRequest) XXX_Merge(src proto.Message)

+ func (m *UpdateRevisionForPathsRequest) XXX_Size() int

+ func (m *UpdateRevisionForPathsRequest) XXX_Unmarshal(b []byte) error

+ type UpdateRevisionForPathsResponse struct

+ Changes bool

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*UpdateRevisionForPathsResponse) Descriptor() ([]byte, []int)

+ func (*UpdateRevisionForPathsResponse) ProtoMessage()

+ func (m *UpdateRevisionForPathsResponse) GetChanges() bool

+ func (m *UpdateRevisionForPathsResponse) Marshal() (dAtA []byte, err error)

+ func (m *UpdateRevisionForPathsResponse) MarshalTo(dAtA []byte) (int, error)

+ func (m *UpdateRevisionForPathsResponse) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *UpdateRevisionForPathsResponse) Reset()

+ func (m *UpdateRevisionForPathsResponse) Size() (n int)

+ func (m *UpdateRevisionForPathsResponse) String() string

+ func (m *UpdateRevisionForPathsResponse) Unmarshal(dAtA []byte) error

+ func (m *UpdateRevisionForPathsResponse) XXX_DiscardUnknown()

+ func (m *UpdateRevisionForPathsResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *UpdateRevisionForPathsResponse) XXX_Merge(src proto.Message)

+ func (m *UpdateRevisionForPathsResponse) XXX_Size() int

+ func (m *UpdateRevisionForPathsResponse) XXX_Unmarshal(b []byte) error

Apr 29, 2024 GO-2024-2877

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

Apr 15, 2024 GO-2024-2877

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

Apr 5, 2024 GO-2024-2877

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

Jul 22, 2024 GO-2024-3006

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jul 15, 2024 GO-2024-3002 +1 more

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jul 2, 2024 GO-2024-3002 +1 more

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jun 6, 2024 GO-2024-3002 +1 more

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

May 23, 2024 GO-2024-2898 +3 more

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

May 21, 2024 GO-2024-2898 +3 more

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Apr 30, 2024 GO-2024-2877 +4 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Apr 26, 2024 GO-2024-2877 +4 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Apr 15, 2024 GO-2024-2792 +5 more

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Apr 5, 2024 GO-2024-2728 +6 more

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Mar 28, 2024 GO-2024-2728 +6 more

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Mar 18, 2024 GO-2024-2667 +7 more

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Mar 13, 2024 GO-2024-2652 +9 more

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Mar 1, 2024 GO-2024-2643 +11 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Feb 13, 2024 GO-2024-2643 +11 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Feb 5, 2024 GO-2024-2643 +11 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Feb 2, 2024 GO-2024-2877

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

Jan 25, 2024 GO-2024-2877

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

Jan 19, 2024 GO-2024-2877

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

Jan 18, 2024 GO-2024-2877

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

Dec 18, 2023 GO-2024-2877

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

Jul 22, 2024 GO-2024-3006

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jul 15, 2024 GO-2024-3002 +1 more

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jul 2, 2024 GO-2024-3002 +1 more

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jun 6, 2024 GO-2024-3002 +1 more

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

May 23, 2024 GO-2024-2898 +3 more

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

May 21, 2024 GO-2024-2898 +3 more

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Apr 30, 2024 GO-2024-2877 +4 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Apr 26, 2024 GO-2024-2877 +4 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Apr 15, 2024 GO-2024-2792 +5 more

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Apr 4, 2024 GO-2024-2728 +6 more

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Mar 28, 2024 GO-2024-2728 +6 more

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Mar 18, 2024 GO-2024-2667 +7 more

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Mar 13, 2024 GO-2024-2652 +9 more

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Mar 1, 2024 GO-2024-2643 +11 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Feb 2, 2024 GO-2024-2643 +11 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jan 19, 2024 GO-2024-2643 +11 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jan 18, 2024 GO-2024-2643 +11 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Dec 1, 2023 GO-2024-2643 +11 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Nov 20, 2023 GO-2024-2643 +10 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Nov 14, 2023 GO-2024-2643 +10 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Nov 6, 2023 GO-2024-2643 +10 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Changes in this version

type ManifestRequest

+ ProjectName string

+ ProjectSourceRepos []string

+ func (m *ManifestRequest) GetProjectName() string

+ func (m *ManifestRequest) GetProjectSourceRepos() []string

Oct 31, 2023 GO-2024-2877 +3 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Oct 25, 2023 GO-2024-2877 +3 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Oct 3, 2023 GO-2024-2877 +3 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Sep 25, 2023 GO-2024-2877 +3 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Aug 21, 2024 GO-2024-2898 +2 more

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

May 23, 2024 GO-2024-2898 +2 more

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

May 21, 2024 GO-2024-2898 +2 more

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Apr 30, 2024 GO-2024-2877 +3 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Apr 26, 2024 GO-2024-2877 +3 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Apr 15, 2024 GO-2024-2792 +4 more

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Apr 4, 2024 GO-2024-2728 +5 more

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Mar 28, 2024 GO-2024-2728 +5 more

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Mar 18, 2024 GO-2024-2667 +6 more

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Mar 13, 2024 GO-2024-2652 +8 more

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Mar 1, 2024 GO-2024-2643 +10 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Feb 2, 2024 GO-2024-2643 +10 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jan 19, 2024 GO-2024-2643 +10 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jan 19, 2024 GO-2024-2643 +10 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Changes in this version

type GitDirectoriesRequest

+ NoRevisionCache bool

+ func (m *GitDirectoriesRequest) GetNoRevisionCache() bool

type GitFilesRequest

+ NoRevisionCache bool

+ func (m *GitFilesRequest) GetNoRevisionCache() bool

Nov 20, 2023 GO-2024-2643 +10 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Oct 31, 2023 GO-2024-2643 +10 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Oct 26, 2023 GO-2024-2643 +10 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Sep 13, 2023 GO-2024-2643 +10 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Sep 7, 2023 GO-2024-2643 +10 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Aug 24, 2023 GO-2023-2049 +12 more

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Aug 21, 2023 GO-2023-2049 +12 more

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Aug 7, 2023 GO-2023-2018 +13 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Changes in this version

+ type GitDirectoriesRequest struct

+ Repo *v1alpha1.Repository

+ Revision string

+ SubmoduleEnabled bool

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*GitDirectoriesRequest) Descriptor() ([]byte, []int)

+ func (*GitDirectoriesRequest) ProtoMessage()

+ func (m *GitDirectoriesRequest) GetRepo() *v1alpha1.Repository

+ func (m *GitDirectoriesRequest) GetRevision() string

+ func (m *GitDirectoriesRequest) GetSubmoduleEnabled() bool

+ func (m *GitDirectoriesRequest) Marshal() (dAtA []byte, err error)

+ func (m *GitDirectoriesRequest) MarshalTo(dAtA []byte) (int, error)

+ func (m *GitDirectoriesRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *GitDirectoriesRequest) Reset()

+ func (m *GitDirectoriesRequest) Size() (n int)

+ func (m *GitDirectoriesRequest) String() string

+ func (m *GitDirectoriesRequest) Unmarshal(dAtA []byte) error

+ func (m *GitDirectoriesRequest) XXX_DiscardUnknown()

+ func (m *GitDirectoriesRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *GitDirectoriesRequest) XXX_Merge(src proto.Message)

+ func (m *GitDirectoriesRequest) XXX_Size() int

+ func (m *GitDirectoriesRequest) XXX_Unmarshal(b []byte) error

+ type GitDirectoriesResponse struct

+ Paths []string

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*GitDirectoriesResponse) Descriptor() ([]byte, []int)

+ func (*GitDirectoriesResponse) ProtoMessage()

+ func (m *GitDirectoriesResponse) GetPaths() []string

+ func (m *GitDirectoriesResponse) Marshal() (dAtA []byte, err error)

+ func (m *GitDirectoriesResponse) MarshalTo(dAtA []byte) (int, error)

+ func (m *GitDirectoriesResponse) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *GitDirectoriesResponse) Reset()

+ func (m *GitDirectoriesResponse) Size() (n int)

+ func (m *GitDirectoriesResponse) String() string

+ func (m *GitDirectoriesResponse) Unmarshal(dAtA []byte) error

+ func (m *GitDirectoriesResponse) XXX_DiscardUnknown()

+ func (m *GitDirectoriesResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *GitDirectoriesResponse) XXX_Merge(src proto.Message)

+ func (m *GitDirectoriesResponse) XXX_Size() int

+ func (m *GitDirectoriesResponse) XXX_Unmarshal(b []byte) error

+ type GitFilesRequest struct

+ NewGitFileGlobbingEnabled bool

+ Path string

+ Repo *v1alpha1.Repository

+ Revision string

+ SubmoduleEnabled bool

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*GitFilesRequest) Descriptor() ([]byte, []int)

+ func (*GitFilesRequest) ProtoMessage()

+ func (m *GitFilesRequest) GetNewGitFileGlobbingEnabled() bool

+ func (m *GitFilesRequest) GetPath() string

+ func (m *GitFilesRequest) GetRepo() *v1alpha1.Repository

+ func (m *GitFilesRequest) GetRevision() string

+ func (m *GitFilesRequest) GetSubmoduleEnabled() bool

+ func (m *GitFilesRequest) Marshal() (dAtA []byte, err error)

+ func (m *GitFilesRequest) MarshalTo(dAtA []byte) (int, error)

+ func (m *GitFilesRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *GitFilesRequest) Reset()

+ func (m *GitFilesRequest) Size() (n int)

+ func (m *GitFilesRequest) String() string

+ func (m *GitFilesRequest) Unmarshal(dAtA []byte) error

+ func (m *GitFilesRequest) XXX_DiscardUnknown()

+ func (m *GitFilesRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *GitFilesRequest) XXX_Merge(src proto.Message)

+ func (m *GitFilesRequest) XXX_Size() int

+ func (m *GitFilesRequest) XXX_Unmarshal(b []byte) error

+ type GitFilesResponse struct

+ Map map[string][]byte

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*GitFilesResponse) Descriptor() ([]byte, []int)

+ func (*GitFilesResponse) ProtoMessage()

+ func (m *GitFilesResponse) GetMap() map[string][]byte

+ func (m *GitFilesResponse) Marshal() (dAtA []byte, err error)

+ func (m *GitFilesResponse) MarshalTo(dAtA []byte) (int, error)

+ func (m *GitFilesResponse) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *GitFilesResponse) Reset()

+ func (m *GitFilesResponse) Size() (n int)

+ func (m *GitFilesResponse) String() string

+ func (m *GitFilesResponse) Unmarshal(dAtA []byte) error

+ func (m *GitFilesResponse) XXX_DiscardUnknown()

+ func (m *GitFilesResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *GitFilesResponse) XXX_Merge(src proto.Message)

+ func (m *GitFilesResponse) XXX_Size() int

+ func (m *GitFilesResponse) XXX_Unmarshal(b []byte) error

+ type RepoServerRevisionChartDetailsRequest struct

+ Name string

+ Repo *v1alpha1.Repository

+ Revision string

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*RepoServerRevisionChartDetailsRequest) Descriptor() ([]byte, []int)

+ func (*RepoServerRevisionChartDetailsRequest) ProtoMessage()

+ func (m *RepoServerRevisionChartDetailsRequest) GetName() string

+ func (m *RepoServerRevisionChartDetailsRequest) GetRepo() *v1alpha1.Repository

+ func (m *RepoServerRevisionChartDetailsRequest) GetRevision() string

+ func (m *RepoServerRevisionChartDetailsRequest) Marshal() (dAtA []byte, err error)

+ func (m *RepoServerRevisionChartDetailsRequest) MarshalTo(dAtA []byte) (int, error)

+ func (m *RepoServerRevisionChartDetailsRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *RepoServerRevisionChartDetailsRequest) Reset()

+ func (m *RepoServerRevisionChartDetailsRequest) Size() (n int)

+ func (m *RepoServerRevisionChartDetailsRequest) String() string

+ func (m *RepoServerRevisionChartDetailsRequest) Unmarshal(dAtA []byte) error

+ func (m *RepoServerRevisionChartDetailsRequest) XXX_DiscardUnknown()

+ func (m *RepoServerRevisionChartDetailsRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *RepoServerRevisionChartDetailsRequest) XXX_Merge(src proto.Message)

+ func (m *RepoServerRevisionChartDetailsRequest) XXX_Size() int

+ func (m *RepoServerRevisionChartDetailsRequest) XXX_Unmarshal(b []byte) error

type RepoServerServiceClient

+ GetGitDirectories func(ctx context.Context, in *GitDirectoriesRequest, opts ...grpc.CallOption) (*GitDirectoriesResponse, error)

+ GetGitFiles func(ctx context.Context, in *GitFilesRequest, opts ...grpc.CallOption) (*GitFilesResponse, error)

+ GetRevisionChartDetails func(ctx context.Context, in *RepoServerRevisionChartDetailsRequest, ...) (*v1alpha1.ChartDetails, error)

type RepoServerServiceServer

+ GetGitDirectories func(context.Context, *GitDirectoriesRequest) (*GitDirectoriesResponse, error)

+ GetGitFiles func(context.Context, *GitFilesRequest) (*GitFilesResponse, error)

+ GetRevisionChartDetails func(context.Context, *RepoServerRevisionChartDetailsRequest) (*v1alpha1.ChartDetails, error)

type UnimplementedRepoServerServiceServer

+ func (*UnimplementedRepoServerServiceServer) GetGitDirectories(ctx context.Context, req *GitDirectoriesRequest) (*GitDirectoriesResponse, error)

+ func (*UnimplementedRepoServerServiceServer) GetGitFiles(ctx context.Context, req *GitFilesRequest) (*GitFilesResponse, error)

+ func (*UnimplementedRepoServerServiceServer) GetRevisionChartDetails(ctx context.Context, req *RepoServerRevisionChartDetailsRequest) (*v1alpha1.ChartDetails, error)

Aug 3, 2023 GO-2024-2643 +10 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jul 27, 2023 GO-2024-2643 +10 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jul 19, 2023 GO-2024-2643 +10 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jul 18, 2023 GO-2024-2643 +10 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jul 12, 2023 GO-2024-2643 +10 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jul 5, 2023 GO-2024-2643 +10 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jun 27, 2023 GO-2024-2643 +10 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Apr 4, 2024 GO-2024-2643 +10 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Feb 2, 2024 GO-2024-2643 +10 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jan 19, 2024 GO-2024-2643 +10 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Nov 2, 2023 GO-2024-2643 +10 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Sep 7, 2023 GO-2024-2643 +10 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Aug 24, 2023 GO-2023-2049 +12 more

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Aug 21, 2023 GO-2023-2049 +12 more

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Aug 7, 2023 GO-2023-2018 +13 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jul 31, 2023 GO-2023-2018 +13 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jul 24, 2023 GO-2023-2018 +13 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jul 19, 2023 GO-2023-2018 +13 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jul 5, 2023 GO-2023-2018 +13 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jun 20, 2023 GO-2023-2018 +13 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jun 16, 2023 GO-2023-2018 +13 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jun 5, 2023 GO-2023-2018 +13 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

May 24, 2023 GO-2023-2018 +13 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

May 12, 2023 GO-2023-2018 +13 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

May 2, 2023 GO-2023-2018 +13 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

May 2, 2023 GO-2023-2018 +13 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Apr 11, 2023 GO-2024-2643 +10 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Mar 27, 2023 GO-2024-2643 +10 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Sep 7, 2023 GO-2024-2643 +10 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Aug 7, 2023 GO-2023-2049 +12 more

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jul 19, 2023 GO-2023-2018 +13 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jul 5, 2023 GO-2023-2018 +13 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jun 20, 2023 GO-2023-2018 +13 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jun 16, 2023 GO-2023-2018 +13 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jun 5, 2023 GO-2023-2018 +13 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

May 25, 2023 GO-2023-2018 +13 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Mar 23, 2023 GO-2023-2018 +13 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Mar 16, 2023 GO-2023-1670 +14 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Mar 14, 2023 GO-2023-1670 +14 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Mar 7, 2023 GO-2023-1670 +14 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Feb 27, 2023 GO-2023-1670 +14 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Feb 16, 2023 GO-2023-1670 +14 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Feb 8, 2023 GO-2023-1577 +15 more

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Feb 6, 2023 GO-2023-1548 +16 more

  GO-2023-1548: Repository access credential leak in github.com/argoproj/argo-cd/v2

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Changes in this version

type ManifestRequest

+ HasMultipleSources bool

+ RefSources map[string]*v1alpha1.RefTarget

+ func (m *ManifestRequest) GetHasMultipleSources() bool

+ func (m *ManifestRequest) GetRefSources() map[string]*v1alpha1.RefTarget

+ type ParameterAnnouncement struct

+ Array []string

+ CollectionType string

+ ItemType string

+ Map map[string]string

+ Name string

+ Required bool

+ String_ string

+ Title string

+ Tooltip string

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*ParameterAnnouncement) Descriptor() ([]byte, []int)

+ func (*ParameterAnnouncement) ProtoMessage()

+ func (m *ParameterAnnouncement) GetArray() []string

+ func (m *ParameterAnnouncement) GetCollectionType() string

+ func (m *ParameterAnnouncement) GetItemType() string

+ func (m *ParameterAnnouncement) GetMap() map[string]string

+ func (m *ParameterAnnouncement) GetName() string

+ func (m *ParameterAnnouncement) GetRequired() bool

+ func (m *ParameterAnnouncement) GetString_() string

+ func (m *ParameterAnnouncement) GetTitle() string

+ func (m *ParameterAnnouncement) GetTooltip() string

+ func (m *ParameterAnnouncement) Marshal() (dAtA []byte, err error)

+ func (m *ParameterAnnouncement) MarshalTo(dAtA []byte) (int, error)

+ func (m *ParameterAnnouncement) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *ParameterAnnouncement) Reset()

+ func (m *ParameterAnnouncement) Size() (n int)

+ func (m *ParameterAnnouncement) String() string

+ func (m *ParameterAnnouncement) Unmarshal(dAtA []byte) error

+ func (m *ParameterAnnouncement) XXX_DiscardUnknown()

+ func (m *ParameterAnnouncement) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ParameterAnnouncement) XXX_Merge(src proto.Message)

+ func (m *ParameterAnnouncement) XXX_Size() int

+ func (m *ParameterAnnouncement) XXX_Unmarshal(b []byte) error

+ type PluginAppSpec struct

+ ParametersAnnouncement []*ParameterAnnouncement

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*PluginAppSpec) Descriptor() ([]byte, []int)

+ func (*PluginAppSpec) ProtoMessage()

+ func (m *PluginAppSpec) GetParametersAnnouncement() []*ParameterAnnouncement

+ func (m *PluginAppSpec) Marshal() (dAtA []byte, err error)

+ func (m *PluginAppSpec) MarshalTo(dAtA []byte) (int, error)

+ func (m *PluginAppSpec) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *PluginAppSpec) Reset()

+ func (m *PluginAppSpec) Size() (n int)

+ func (m *PluginAppSpec) String() string

+ func (m *PluginAppSpec) Unmarshal(dAtA []byte) error

+ func (m *PluginAppSpec) XXX_DiscardUnknown()

+ func (m *PluginAppSpec) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *PluginAppSpec) XXX_Merge(src proto.Message)

+ func (m *PluginAppSpec) XXX_Size() int

+ func (m *PluginAppSpec) XXX_Unmarshal(b []byte) error

+ type PluginInfo struct

+ Name string

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*PluginInfo) Descriptor() ([]byte, []int)

+ func (*PluginInfo) ProtoMessage()

+ func (m *PluginInfo) GetName() string

+ func (m *PluginInfo) Marshal() (dAtA []byte, err error)

+ func (m *PluginInfo) MarshalTo(dAtA []byte) (int, error)

+ func (m *PluginInfo) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *PluginInfo) Reset()

+ func (m *PluginInfo) Size() (n int)

+ func (m *PluginInfo) String() string

+ func (m *PluginInfo) Unmarshal(dAtA []byte) error

+ func (m *PluginInfo) XXX_DiscardUnknown()

+ func (m *PluginInfo) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *PluginInfo) XXX_Merge(src proto.Message)

+ func (m *PluginInfo) XXX_Size() int

+ func (m *PluginInfo) XXX_Unmarshal(b []byte) error

+ type PluginList struct

+ Items []*PluginInfo

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*PluginList) Descriptor() ([]byte, []int)

+ func (*PluginList) ProtoMessage()

+ func (m *PluginList) GetItems() []*PluginInfo

+ func (m *PluginList) Marshal() (dAtA []byte, err error)

+ func (m *PluginList) MarshalTo(dAtA []byte) (int, error)

+ func (m *PluginList) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *PluginList) Reset()

+ func (m *PluginList) Size() (n int)

+ func (m *PluginList) String() string

+ func (m *PluginList) Unmarshal(dAtA []byte) error

+ func (m *PluginList) XXX_DiscardUnknown()

+ func (m *PluginList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *PluginList) XXX_Merge(src proto.Message)

+ func (m *PluginList) XXX_Size() int

+ func (m *PluginList) XXX_Unmarshal(b []byte) error

type RepoAppDetailsResponse

+ Plugin *PluginAppSpec

+ func (m *RepoAppDetailsResponse) GetPlugin() *PluginAppSpec

type RepoServerAppDetailsQuery

+ RefSources map[string]*v1alpha1.RefTarget

+ func (m *RepoServerAppDetailsQuery) GetRefSources() map[string]*v1alpha1.RefTarget

type RepoServerServiceClient

+ ListPlugins func(ctx context.Context, in *emptypb.Empty, opts ...grpc.CallOption) (*PluginList, error)

type RepoServerServiceServer

+ ListPlugins func(context.Context, *emptypb.Empty) (*PluginList, error)

type UnimplementedRepoServerServiceServer

+ func (*UnimplementedRepoServerServiceServer) ListPlugins(ctx context.Context, req *emptypb.Empty) (*PluginList, error)

Feb 2, 2023 GO-2023-1548 +12 more

  GO-2023-1548: Repository access credential leak in github.com/argoproj/argo-cd/v2

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jan 27, 2023 GO-2023-1548 +12 more

  GO-2023-1548: Repository access credential leak in github.com/argoproj/argo-cd/v2

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jan 25, 2023 GO-2023-1548 +12 more

  GO-2023-1548: Repository access credential leak in github.com/argoproj/argo-cd/v2

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jan 18, 2023 GO-2023-1512 +14 more

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1548: Repository access credential leak in github.com/argoproj/argo-cd/v2

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jan 13, 2023 GO-2023-1520 +13 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1548: Repository access credential leak in github.com/argoproj/argo-cd/v2

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jan 5, 2023 GO-2023-1520 +13 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1548: Repository access credential leak in github.com/argoproj/argo-cd/v2

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Dec 19, 2022 GO-2023-1520 +13 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1548: Repository access credential leak in github.com/argoproj/argo-cd/v2

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Aug 7, 2023 GO-2023-2049 +11 more

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jul 19, 2023 GO-2023-2049 +11 more

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jul 5, 2023 GO-2023-2049 +11 more

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jun 16, 2023 GO-2023-2049 +11 more

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jun 5, 2023 GO-2023-2049 +11 more

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

May 25, 2023 GO-2023-2049 +11 more

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Mar 23, 2023 GO-2023-2049 +11 more

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Mar 16, 2023 GO-2023-1670 +12 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Mar 14, 2023 GO-2023-1670 +12 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Mar 7, 2023 GO-2023-1670 +12 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Feb 27, 2023 GO-2023-1670 +12 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Feb 16, 2023 GO-2023-1670 +12 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Feb 2, 2023 GO-2023-1577 +13 more

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jan 27, 2023 GO-2023-1577 +13 more

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jan 25, 2023 GO-2023-1577 +13 more

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jan 18, 2023 GO-2023-1512 +15 more

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jan 10, 2023 GO-2023-1512 +15 more

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Dec 16, 2022 GO-2023-1512 +15 more

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Dec 6, 2022 GO-2023-1512 +15 more

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Nov 28, 2022 GO-2023-1512 +15 more

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Nov 7, 2022 GO-2023-1512 +15 more

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Nov 1, 2022 GO-2023-1512 +15 more

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Oct 24, 2022 GO-2023-1512 +15 more

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Changes in this version

+ type ManifestFileChunk struct

+ Chunk []byte

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*ManifestFileChunk) Descriptor() ([]byte, []int)

+ func (*ManifestFileChunk) ProtoMessage()

+ func (m *ManifestFileChunk) GetChunk() []byte

+ func (m *ManifestFileChunk) Marshal() (dAtA []byte, err error)

+ func (m *ManifestFileChunk) MarshalTo(dAtA []byte) (int, error)

+ func (m *ManifestFileChunk) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *ManifestFileChunk) Reset()

+ func (m *ManifestFileChunk) Size() (n int)

+ func (m *ManifestFileChunk) String() string

+ func (m *ManifestFileChunk) Unmarshal(dAtA []byte) error

+ func (m *ManifestFileChunk) XXX_DiscardUnknown()

+ func (m *ManifestFileChunk) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ManifestFileChunk) XXX_Merge(src proto.Message)

+ func (m *ManifestFileChunk) XXX_Size() int

+ func (m *ManifestFileChunk) XXX_Unmarshal(b []byte) error

+ type ManifestFileMetadata struct

+ Checksum string

+ Size_ int64

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*ManifestFileMetadata) Descriptor() ([]byte, []int)

+ func (*ManifestFileMetadata) ProtoMessage()

+ func (m *ManifestFileMetadata) GetChecksum() string

+ func (m *ManifestFileMetadata) GetSize_() int64

+ func (m *ManifestFileMetadata) Marshal() (dAtA []byte, err error)

+ func (m *ManifestFileMetadata) MarshalTo(dAtA []byte) (int, error)

+ func (m *ManifestFileMetadata) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *ManifestFileMetadata) Reset()

+ func (m *ManifestFileMetadata) Size() (n int)

+ func (m *ManifestFileMetadata) String() string

+ func (m *ManifestFileMetadata) Unmarshal(dAtA []byte) error

+ func (m *ManifestFileMetadata) XXX_DiscardUnknown()

+ func (m *ManifestFileMetadata) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ManifestFileMetadata) XXX_Merge(src proto.Message)

+ func (m *ManifestFileMetadata) XXX_Size() int

+ func (m *ManifestFileMetadata) XXX_Unmarshal(b []byte) error

+ type ManifestRequestWithFiles struct

+ Part isManifestRequestWithFiles_Part

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*ManifestRequestWithFiles) Descriptor() ([]byte, []int)

+ func (*ManifestRequestWithFiles) ProtoMessage()

+ func (*ManifestRequestWithFiles) XXX_OneofWrappers() []interface{}

+ func (m *ManifestRequestWithFiles) GetChunk() *ManifestFileChunk

+ func (m *ManifestRequestWithFiles) GetMetadata() *ManifestFileMetadata

+ func (m *ManifestRequestWithFiles) GetPart() isManifestRequestWithFiles_Part

+ func (m *ManifestRequestWithFiles) GetRequest() *ManifestRequest

+ func (m *ManifestRequestWithFiles) Marshal() (dAtA []byte, err error)

+ func (m *ManifestRequestWithFiles) MarshalTo(dAtA []byte) (int, error)

+ func (m *ManifestRequestWithFiles) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *ManifestRequestWithFiles) Reset()

+ func (m *ManifestRequestWithFiles) Size() (n int)

+ func (m *ManifestRequestWithFiles) String() string

+ func (m *ManifestRequestWithFiles) Unmarshal(dAtA []byte) error

+ func (m *ManifestRequestWithFiles) XXX_DiscardUnknown()

+ func (m *ManifestRequestWithFiles) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ManifestRequestWithFiles) XXX_Merge(src proto.Message)

+ func (m *ManifestRequestWithFiles) XXX_Size() int

+ func (m *ManifestRequestWithFiles) XXX_Unmarshal(b []byte) error

+ type ManifestRequestWithFiles_Chunk struct

+ Chunk *ManifestFileChunk

+ func (m *ManifestRequestWithFiles_Chunk) MarshalTo(dAtA []byte) (int, error)

+ func (m *ManifestRequestWithFiles_Chunk) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *ManifestRequestWithFiles_Chunk) Size() (n int)

+ type ManifestRequestWithFiles_Metadata struct

+ Metadata *ManifestFileMetadata

+ func (m *ManifestRequestWithFiles_Metadata) MarshalTo(dAtA []byte) (int, error)

+ func (m *ManifestRequestWithFiles_Metadata) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *ManifestRequestWithFiles_Metadata) Size() (n int)

+ type ManifestRequestWithFiles_Request struct

+ Request *ManifestRequest

+ func (m *ManifestRequestWithFiles_Request) MarshalTo(dAtA []byte) (int, error)

+ func (m *ManifestRequestWithFiles_Request) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *ManifestRequestWithFiles_Request) Size() (n int)

type RepoServerServiceClient

+ GenerateManifestWithFiles func(ctx context.Context, opts ...grpc.CallOption) (RepoServerService_GenerateManifestWithFilesClient, error)

type RepoServerServiceServer

+ GenerateManifestWithFiles func(RepoServerService_GenerateManifestWithFilesServer) error

+ type RepoServerService_GenerateManifestWithFilesClient interface

+ CloseAndRecv func() (*ManifestResponse, error)

+ Send func(*ManifestRequestWithFiles) error

+ type RepoServerService_GenerateManifestWithFilesServer interface

+ Recv func() (*ManifestRequestWithFiles, error)

+ SendAndClose func(*ManifestResponse) error

type UnimplementedRepoServerServiceServer

+ func (*UnimplementedRepoServerServiceServer) GenerateManifestWithFiles(srv RepoServerService_GenerateManifestWithFilesServer) error

Oct 17, 2022 GO-2023-1512 +12 more

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Oct 11, 2022 GO-2023-1512 +12 more

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Oct 5, 2022 GO-2023-1512 +12 more

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Mar 23, 2023 GO-2023-2049 +11 more

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Mar 16, 2023 GO-2023-1670 +12 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Mar 14, 2023 GO-2023-1670 +12 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Mar 7, 2023 GO-2023-1670 +12 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Feb 27, 2023 GO-2023-1670 +12 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Feb 16, 2023 GO-2023-1670 +12 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Feb 2, 2023 GO-2023-1577 +13 more

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jan 27, 2023 GO-2023-1577 +13 more

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jan 25, 2023 GO-2023-1577 +13 more

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jan 18, 2023 GO-2023-1520 +14 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Dec 16, 2022 GO-2023-1520 +14 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Nov 7, 2022 GO-2023-1520 +14 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Nov 1, 2022 GO-2023-1520 +14 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Oct 17, 2022 GO-2023-1520 +14 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Oct 5, 2022 GO-2023-1520 +14 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Oct 3, 2022 GO-2023-1520 +14 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Sep 16, 2022 GO-2023-1520 +14 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Aug 22, 2022 GO-2023-1520 +14 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Aug 17, 2022 GO-2023-1520 +14 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Aug 11, 2022 GO-2023-1520 +14 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jul 29, 2022 GO-2023-1520 +14 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jul 18, 2022 GO-2023-1520 +14 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jul 12, 2022 GO-2023-1520 +14 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jul 12, 2022 GO-2023-1520 +14 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jul 7, 2022 GO-2022-0517 +16 more

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jun 27, 2022 GO-2022-0517 +16 more

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jun 21, 2022 GO-2022-0517 +16 more

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jun 21, 2022 GO-2022-0517 +16 more

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jun 10, 2022 GO-2022-0495 +20 more

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jun 6, 2022 GO-2023-1670 +9 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jun 1, 2022 GO-2023-1670 +9 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

May 31, 2022 GO-2023-1670 +9 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

May 18, 2022 GO-2023-1670 +9 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

May 6, 2022 GO-2023-1670 +9 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Feb 16, 2023 GO-2023-1670 +9 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Feb 2, 2023 GO-2023-1577 +10 more

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jan 27, 2023 GO-2023-1577 +10 more

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jan 25, 2023 GO-2023-1577 +10 more

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jan 18, 2023 GO-2023-1520 +11 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Dec 16, 2022 GO-2023-1520 +11 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Nov 1, 2022 GO-2023-1520 +11 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Oct 17, 2022 GO-2023-1520 +11 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Oct 5, 2022 GO-2023-1520 +11 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Oct 3, 2022 GO-2023-1520 +11 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jul 29, 2022 GO-2023-1520 +11 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jul 12, 2022 GO-2023-1520 +11 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jun 21, 2022 GO-2022-0517 +13 more

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

May 18, 2022 GO-2022-0495 +17 more

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Mar 29, 2022 GO-2022-0453 +20 more

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Mar 23, 2022 GO-2022-0453 +20 more

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Mar 10, 2022 GO-2022-0359 +22 more

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Mar 6, 2022 GO-2022-0359 +22 more

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Changes in this version

type ListAppsRequest

+ EnabledSourceTypes map[string]bool

+ func (m *ListAppsRequest) GetEnabledSourceTypes() map[string]bool

type ManifestRequest

+ EnabledSourceTypes map[string]bool

+ func (m *ManifestRequest) GetEnabledSourceTypes() map[string]bool

type RepoServerAppDetailsQuery

+ EnabledSourceTypes map[string]bool

+ func (m *RepoServerAppDetailsQuery) GetEnabledSourceTypes() map[string]bool

type RepoServerServiceClient

+ ResolveRevision func(ctx context.Context, in *ResolveRevisionRequest, opts ...grpc.CallOption) (*ResolveRevisionResponse, error)

type RepoServerServiceServer

+ ResolveRevision func(context.Context, *ResolveRevisionRequest) (*ResolveRevisionResponse, error)

+ type ResolveRevisionRequest struct

+ AmbiguousRevision string

+ App *v1alpha1.Application

+ Repo *v1alpha1.Repository

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*ResolveRevisionRequest) Descriptor() ([]byte, []int)

+ func (*ResolveRevisionRequest) ProtoMessage()

+ func (m *ResolveRevisionRequest) GetAmbiguousRevision() string

+ func (m *ResolveRevisionRequest) GetApp() *v1alpha1.Application

+ func (m *ResolveRevisionRequest) GetRepo() *v1alpha1.Repository

+ func (m *ResolveRevisionRequest) Marshal() (dAtA []byte, err error)

+ func (m *ResolveRevisionRequest) MarshalTo(dAtA []byte) (int, error)

+ func (m *ResolveRevisionRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *ResolveRevisionRequest) Reset()

+ func (m *ResolveRevisionRequest) Size() (n int)

+ func (m *ResolveRevisionRequest) String() string

+ func (m *ResolveRevisionRequest) Unmarshal(dAtA []byte) error

+ func (m *ResolveRevisionRequest) XXX_DiscardUnknown()

+ func (m *ResolveRevisionRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ResolveRevisionRequest) XXX_Merge(src proto.Message)

+ func (m *ResolveRevisionRequest) XXX_Size() int

+ func (m *ResolveRevisionRequest) XXX_Unmarshal(b []byte) error

+ type ResolveRevisionResponse struct

+ AmbiguousRevision string

+ Revision string

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*ResolveRevisionResponse) Descriptor() ([]byte, []int)

+ func (*ResolveRevisionResponse) ProtoMessage()

+ func (m *ResolveRevisionResponse) GetAmbiguousRevision() string

+ func (m *ResolveRevisionResponse) GetRevision() string

+ func (m *ResolveRevisionResponse) Marshal() (dAtA []byte, err error)

+ func (m *ResolveRevisionResponse) MarshalTo(dAtA []byte) (int, error)

+ func (m *ResolveRevisionResponse) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *ResolveRevisionResponse) Reset()

+ func (m *ResolveRevisionResponse) Size() (n int)

+ func (m *ResolveRevisionResponse) String() string

+ func (m *ResolveRevisionResponse) Unmarshal(dAtA []byte) error

+ func (m *ResolveRevisionResponse) XXX_DiscardUnknown()

+ func (m *ResolveRevisionResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ResolveRevisionResponse) XXX_Merge(src proto.Message)

+ func (m *ResolveRevisionResponse) XXX_Size() int

+ func (m *ResolveRevisionResponse) XXX_Unmarshal(b []byte) error

type UnimplementedRepoServerServiceServer

+ func (*UnimplementedRepoServerServiceServer) ResolveRevision(ctx context.Context, req *ResolveRevisionRequest) (*ResolveRevisionResponse, error)

Feb 4, 2022 GO-2022-0357 +13 more

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Feb 3, 2022 GO-2022-0357 +13 more

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Feb 2, 2022 GO-2022-0357 +13 more

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jan 30, 2022 GO-2022-0357 +13 more

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Nov 1, 2022 GO-2023-1520 +11 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Oct 18, 2022 GO-2023-1520 +11 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Oct 5, 2022 GO-2023-1520 +11 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Oct 3, 2022 GO-2023-1520 +11 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jul 29, 2022 GO-2023-1520 +11 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jul 12, 2022 GO-2023-1520 +11 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jun 21, 2022 GO-2022-0518 +12 more

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

May 18, 2022 GO-2022-0495 +16 more

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Mar 23, 2022 GO-2022-0453 +19 more

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Mar 28, 2022 GO-2022-0359 +21 more

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Mar 9, 2022 GO-2022-0359 +21 more

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Mar 6, 2022 GO-2022-0359 +21 more

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Feb 5, 2022 GO-2022-0357 +23 more

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Feb 3, 2022 GO-2022-0357 +23 more

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jan 18, 2022 GO-2022-0304 +24 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jan 1, 2022 GO-2022-0304 +24 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Dec 17, 2021 GO-2022-0304 +24 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Dec 14, 2021 GO-2022-0304 +24 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Changes in this version

type ManifestRequest

+ TrackingMethod string

+ func (m *ManifestRequest) GetTrackingMethod() string

type RepoServerAppDetailsQuery

+ TrackingMethod string

+ func (m *RepoServerAppDetailsQuery) GetTrackingMethod() string

Nov 12, 2021 GO-2022-0518 +11 more

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jun 21, 2022 GO-2022-0518 +11 more

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

May 18, 2022 GO-2022-0495 +15 more

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Mar 23, 2022 GO-2022-0453 +18 more

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Mar 22, 2022 GO-2022-0359 +20 more

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Mar 9, 2022 GO-2022-0359 +20 more

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Mar 6, 2022 GO-2022-0359 +20 more

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Changes in this version

type ManifestRequest

+ HelmOptions *v1alpha1.HelmOptions

+ func (m *ManifestRequest) GetHelmOptions() *v1alpha1.HelmOptions

+ func (q *ManifestRequest) GetValuesFileSchemes() []string

type RepoServerAppDetailsQuery

+ HelmOptions *v1alpha1.HelmOptions

+ func (m *RepoServerAppDetailsQuery) GetHelmOptions() *v1alpha1.HelmOptions

+ func (q *RepoServerAppDetailsQuery) GetValuesFileSchemes() []string

Feb 5, 2022 GO-2022-0357 +22 more

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Feb 3, 2022 GO-2022-0357 +22 more

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Dec 13, 2021 GO-2022-0304 +23 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Nov 17, 2021 GO-2022-0304 +23 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Oct 28, 2021 GO-2022-0304 +23 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Oct 20, 2021 GO-2022-0304 +23 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Oct 20, 2021 GO-2022-0304 +23 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Sep 29, 2021 GO-2022-0304 +23 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Changes in this version

type RepoServerAppDetailsQuery

+ NoRevisionCache bool

+ func (m *RepoServerAppDetailsQuery) GetNoRevisionCache() bool

Sep 2, 2021 GO-2022-0304 +23 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Nov 19, 2021 GO-2022-0304 +23 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Aug 25, 2021 GO-2022-0304 +23 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Aug 20, 2021 GO-2022-0304 +23 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Changes in this version

type ManifestRequest

+ HelmRepoCreds []*v1alpha1.RepoCreds

+ NoRevisionCache bool

+ func (m *ManifestRequest) GetHelmRepoCreds() []*v1alpha1.RepoCreds

+ func (m *ManifestRequest) GetNoRevisionCache() bool

type RepoServerAppDetailsQuery

+ NoCache bool

+ func (m *RepoServerAppDetailsQuery) GetNoCache() bool

type RepoServerServiceClient

+ TestRepository func(ctx context.Context, in *TestRepositoryRequest, opts ...grpc.CallOption) (*TestRepositoryResponse, error)

type RepoServerServiceServer

+ TestRepository func(context.Context, *TestRepositoryRequest) (*TestRepositoryResponse, error)

+ type TestRepositoryRequest struct

+ Repo *v1alpha1.Repository

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*TestRepositoryRequest) Descriptor() ([]byte, []int)

+ func (*TestRepositoryRequest) ProtoMessage()

+ func (m *TestRepositoryRequest) GetRepo() *v1alpha1.Repository

+ func (m *TestRepositoryRequest) Marshal() (dAtA []byte, err error)

+ func (m *TestRepositoryRequest) MarshalTo(dAtA []byte) (int, error)

+ func (m *TestRepositoryRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *TestRepositoryRequest) Reset()

+ func (m *TestRepositoryRequest) Size() (n int)

+ func (m *TestRepositoryRequest) String() string

+ func (m *TestRepositoryRequest) Unmarshal(dAtA []byte) error

+ func (m *TestRepositoryRequest) XXX_DiscardUnknown()

+ func (m *TestRepositoryRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *TestRepositoryRequest) XXX_Merge(src proto.Message)

+ func (m *TestRepositoryRequest) XXX_Size() int

+ func (m *TestRepositoryRequest) XXX_Unmarshal(b []byte) error

+ type TestRepositoryResponse struct

+ VerifiedRepository bool

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*TestRepositoryResponse) Descriptor() ([]byte, []int)

+ func (*TestRepositoryResponse) ProtoMessage()

+ func (m *TestRepositoryResponse) GetVerifiedRepository() bool

+ func (m *TestRepositoryResponse) Marshal() (dAtA []byte, err error)

+ func (m *TestRepositoryResponse) MarshalTo(dAtA []byte) (int, error)

+ func (m *TestRepositoryResponse) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *TestRepositoryResponse) Reset()

+ func (m *TestRepositoryResponse) Size() (n int)

+ func (m *TestRepositoryResponse) String() string

+ func (m *TestRepositoryResponse) Unmarshal(dAtA []byte) error

+ func (m *TestRepositoryResponse) XXX_DiscardUnknown()

+ func (m *TestRepositoryResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *TestRepositoryResponse) XXX_Merge(src proto.Message)

+ func (m *TestRepositoryResponse) XXX_Size() int

+ func (m *TestRepositoryResponse) XXX_Unmarshal(b []byte) error

type UnimplementedRepoServerServiceServer

+ func (*UnimplementedRepoServerServiceServer) TestRepository(ctx context.Context, req *TestRepositoryRequest) (*TestRepositoryResponse, error)

Aug 11, 2021 GO-2022-0304 +23 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Aug 3, 2021 GO-2022-0304 +23 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jul 28, 2021 GO-2022-0304 +23 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jul 22, 2021 GO-2022-0304 +23 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Jun 23, 2021 GO-2022-0304 +23 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

May 27, 2021 GO-2022-0304 +23 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

May 20, 2021 GO-2022-0304 +23 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Apr 15, 2021 GO-2022-0304 +23 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Apr 7, 2021 GO-2022-0304 +23 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Changes in this version

+ const MaxGRPCMessageSize

+ var ErrIntOverflowRepository = fmt.Errorf("proto: integer overflow")

+ var ErrInvalidLengthRepository = fmt.Errorf("proto: negative length found during unmarshaling")

+ var ErrUnexpectedEndOfGroupRepository = fmt.Errorf("proto: unexpected end of group")

+ func NewConnection(address string, timeoutSeconds int, tlsConfig *TLSConfiguration) (*grpc.ClientConn, error)

+ func RegisterRepoServerServiceServer(s *grpc.Server, srv RepoServerServiceServer)

+ type AppList struct

+ Apps map[string]string

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*AppList) Descriptor() ([]byte, []int)

+ func (*AppList) ProtoMessage()

+ func (m *AppList) GetApps() map[string]string

+ func (m *AppList) Marshal() (dAtA []byte, err error)

+ func (m *AppList) MarshalTo(dAtA []byte) (int, error)

+ func (m *AppList) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *AppList) Reset()

+ func (m *AppList) Size() (n int)

+ func (m *AppList) String() string

+ func (m *AppList) Unmarshal(dAtA []byte) error

+ func (m *AppList) XXX_DiscardUnknown()

+ func (m *AppList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *AppList) XXX_Merge(src proto.Message)

+ func (m *AppList) XXX_Size() int

+ func (m *AppList) XXX_Unmarshal(b []byte) error

+ type Clientset interface

+ NewRepoServerClient func() (io.Closer, RepoServerServiceClient, error)

+ func NewRepoServerClientset(address string, timeoutSeconds int, tlsConfig TLSConfiguration) Clientset

+ type DirectoryAppSpec struct

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*DirectoryAppSpec) Descriptor() ([]byte, []int)

+ func (*DirectoryAppSpec) ProtoMessage()

+ func (m *DirectoryAppSpec) Marshal() (dAtA []byte, err error)

+ func (m *DirectoryAppSpec) MarshalTo(dAtA []byte) (int, error)

+ func (m *DirectoryAppSpec) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *DirectoryAppSpec) Reset()

+ func (m *DirectoryAppSpec) Size() (n int)

+ func (m *DirectoryAppSpec) String() string

+ func (m *DirectoryAppSpec) Unmarshal(dAtA []byte) error

+ func (m *DirectoryAppSpec) XXX_DiscardUnknown()

+ func (m *DirectoryAppSpec) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *DirectoryAppSpec) XXX_Merge(src proto.Message)

+ func (m *DirectoryAppSpec) XXX_Size() int

+ func (m *DirectoryAppSpec) XXX_Unmarshal(b []byte) error

+ type HelmAppSpec struct

+ FileParameters []*v1alpha1.HelmFileParameter

+ Name string

+ Parameters []*v1alpha1.HelmParameter

+ ValueFiles []string

+ Values string

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*HelmAppSpec) Descriptor() ([]byte, []int)

+ func (*HelmAppSpec) ProtoMessage()

+ func (m *HelmAppSpec) GetFileParameters() []*v1alpha1.HelmFileParameter

+ func (m *HelmAppSpec) GetName() string

+ func (m *HelmAppSpec) GetParameters() []*v1alpha1.HelmParameter

+ func (m *HelmAppSpec) GetValueFiles() []string

+ func (m *HelmAppSpec) GetValues() string

+ func (m *HelmAppSpec) Marshal() (dAtA []byte, err error)

+ func (m *HelmAppSpec) MarshalTo(dAtA []byte) (int, error)

+ func (m *HelmAppSpec) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *HelmAppSpec) Reset()

+ func (m *HelmAppSpec) Size() (n int)

+ func (m *HelmAppSpec) String() string

+ func (m *HelmAppSpec) Unmarshal(dAtA []byte) error

+ func (m *HelmAppSpec) XXX_DiscardUnknown()

+ func (m *HelmAppSpec) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *HelmAppSpec) XXX_Merge(src proto.Message)

+ func (m *HelmAppSpec) XXX_Size() int

+ func (m *HelmAppSpec) XXX_Unmarshal(b []byte) error

+ type HelmChart struct

+ Name string

+ Versions []string

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*HelmChart) Descriptor() ([]byte, []int)

+ func (*HelmChart) ProtoMessage()

+ func (m *HelmChart) GetName() string

+ func (m *HelmChart) GetVersions() []string

+ func (m *HelmChart) Marshal() (dAtA []byte, err error)

+ func (m *HelmChart) MarshalTo(dAtA []byte) (int, error)

+ func (m *HelmChart) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *HelmChart) Reset()

+ func (m *HelmChart) Size() (n int)

+ func (m *HelmChart) String() string

+ func (m *HelmChart) Unmarshal(dAtA []byte) error

+ func (m *HelmChart) XXX_DiscardUnknown()

+ func (m *HelmChart) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *HelmChart) XXX_Merge(src proto.Message)

+ func (m *HelmChart) XXX_Size() int

+ func (m *HelmChart) XXX_Unmarshal(b []byte) error

+ type HelmChartsRequest struct

+ Repo *v1alpha1.Repository

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*HelmChartsRequest) Descriptor() ([]byte, []int)

+ func (*HelmChartsRequest) ProtoMessage()

+ func (m *HelmChartsRequest) GetRepo() *v1alpha1.Repository

+ func (m *HelmChartsRequest) Marshal() (dAtA []byte, err error)

+ func (m *HelmChartsRequest) MarshalTo(dAtA []byte) (int, error)

+ func (m *HelmChartsRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *HelmChartsRequest) Reset()

+ func (m *HelmChartsRequest) Size() (n int)

+ func (m *HelmChartsRequest) String() string

+ func (m *HelmChartsRequest) Unmarshal(dAtA []byte) error

+ func (m *HelmChartsRequest) XXX_DiscardUnknown()

+ func (m *HelmChartsRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *HelmChartsRequest) XXX_Merge(src proto.Message)

+ func (m *HelmChartsRequest) XXX_Size() int

+ func (m *HelmChartsRequest) XXX_Unmarshal(b []byte) error

+ type HelmChartsResponse struct

+ Items []*HelmChart

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*HelmChartsResponse) Descriptor() ([]byte, []int)

+ func (*HelmChartsResponse) ProtoMessage()

+ func (m *HelmChartsResponse) GetItems() []*HelmChart

+ func (m *HelmChartsResponse) Marshal() (dAtA []byte, err error)

+ func (m *HelmChartsResponse) MarshalTo(dAtA []byte) (int, error)

+ func (m *HelmChartsResponse) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *HelmChartsResponse) Reset()

+ func (m *HelmChartsResponse) Size() (n int)

+ func (m *HelmChartsResponse) String() string

+ func (m *HelmChartsResponse) Unmarshal(dAtA []byte) error

+ func (m *HelmChartsResponse) XXX_DiscardUnknown()

+ func (m *HelmChartsResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *HelmChartsResponse) XXX_Merge(src proto.Message)

+ func (m *HelmChartsResponse) XXX_Size() int

+ func (m *HelmChartsResponse) XXX_Unmarshal(b []byte) error

+ type KsonnetAppSpec struct

+ Environments map[string]*KsonnetEnvironment

+ Name string

+ Parameters []*v1alpha1.KsonnetParameter

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*KsonnetAppSpec) Descriptor() ([]byte, []int)

+ func (*KsonnetAppSpec) ProtoMessage()

+ func (m *KsonnetAppSpec) GetEnvironments() map[string]*KsonnetEnvironment

+ func (m *KsonnetAppSpec) GetName() string

+ func (m *KsonnetAppSpec) GetParameters() []*v1alpha1.KsonnetParameter

+ func (m *KsonnetAppSpec) Marshal() (dAtA []byte, err error)

+ func (m *KsonnetAppSpec) MarshalTo(dAtA []byte) (int, error)

+ func (m *KsonnetAppSpec) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *KsonnetAppSpec) Reset()

+ func (m *KsonnetAppSpec) Size() (n int)

+ func (m *KsonnetAppSpec) String() string

+ func (m *KsonnetAppSpec) Unmarshal(dAtA []byte) error

+ func (m *KsonnetAppSpec) XXX_DiscardUnknown()

+ func (m *KsonnetAppSpec) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *KsonnetAppSpec) XXX_Merge(src proto.Message)

+ func (m *KsonnetAppSpec) XXX_Size() int

+ func (m *KsonnetAppSpec) XXX_Unmarshal(b []byte) error

+ type KsonnetEnvironment struct

+ Destination *KsonnetEnvironmentDestination

+ K8SVersion string

+ Name string

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*KsonnetEnvironment) Descriptor() ([]byte, []int)

+ func (*KsonnetEnvironment) ProtoMessage()

+ func (m *KsonnetEnvironment) GetDestination() *KsonnetEnvironmentDestination

+ func (m *KsonnetEnvironment) GetK8SVersion() string

+ func (m *KsonnetEnvironment) GetName() string

+ func (m *KsonnetEnvironment) Marshal() (dAtA []byte, err error)

+ func (m *KsonnetEnvironment) MarshalTo(dAtA []byte) (int, error)

+ func (m *KsonnetEnvironment) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *KsonnetEnvironment) Reset()

+ func (m *KsonnetEnvironment) Size() (n int)

+ func (m *KsonnetEnvironment) String() string

+ func (m *KsonnetEnvironment) Unmarshal(dAtA []byte) error

+ func (m *KsonnetEnvironment) XXX_DiscardUnknown()

+ func (m *KsonnetEnvironment) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *KsonnetEnvironment) XXX_Merge(src proto.Message)

+ func (m *KsonnetEnvironment) XXX_Size() int

+ func (m *KsonnetEnvironment) XXX_Unmarshal(b []byte) error

+ type KsonnetEnvironmentDestination struct

+ Namespace string

+ Server string

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*KsonnetEnvironmentDestination) Descriptor() ([]byte, []int)

+ func (*KsonnetEnvironmentDestination) ProtoMessage()

+ func (m *KsonnetEnvironmentDestination) GetNamespace() string

+ func (m *KsonnetEnvironmentDestination) GetServer() string

+ func (m *KsonnetEnvironmentDestination) Marshal() (dAtA []byte, err error)

+ func (m *KsonnetEnvironmentDestination) MarshalTo(dAtA []byte) (int, error)

+ func (m *KsonnetEnvironmentDestination) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *KsonnetEnvironmentDestination) Reset()

+ func (m *KsonnetEnvironmentDestination) Size() (n int)

+ func (m *KsonnetEnvironmentDestination) String() string

+ func (m *KsonnetEnvironmentDestination) Unmarshal(dAtA []byte) error

+ func (m *KsonnetEnvironmentDestination) XXX_DiscardUnknown()

+ func (m *KsonnetEnvironmentDestination) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *KsonnetEnvironmentDestination) XXX_Merge(src proto.Message)

+ func (m *KsonnetEnvironmentDestination) XXX_Size() int

+ func (m *KsonnetEnvironmentDestination) XXX_Unmarshal(b []byte) error

+ type KustomizeAppSpec struct

+ Images []string

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*KustomizeAppSpec) Descriptor() ([]byte, []int)

+ func (*KustomizeAppSpec) ProtoMessage()

+ func (m *KustomizeAppSpec) GetImages() []string

+ func (m *KustomizeAppSpec) Marshal() (dAtA []byte, err error)

+ func (m *KustomizeAppSpec) MarshalTo(dAtA []byte) (int, error)

+ func (m *KustomizeAppSpec) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *KustomizeAppSpec) Reset()

+ func (m *KustomizeAppSpec) Size() (n int)

+ func (m *KustomizeAppSpec) String() string

+ func (m *KustomizeAppSpec) Unmarshal(dAtA []byte) error

+ func (m *KustomizeAppSpec) XXX_DiscardUnknown()

+ func (m *KustomizeAppSpec) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *KustomizeAppSpec) XXX_Merge(src proto.Message)

+ func (m *KustomizeAppSpec) XXX_Size() int

+ func (m *KustomizeAppSpec) XXX_Unmarshal(b []byte) error

+ type ListAppsRequest struct

+ Repo *v1alpha1.Repository

+ Revision string

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*ListAppsRequest) Descriptor() ([]byte, []int)

+ func (*ListAppsRequest) ProtoMessage()

+ func (m *ListAppsRequest) GetRepo() *v1alpha1.Repository

+ func (m *ListAppsRequest) GetRevision() string

+ func (m *ListAppsRequest) Marshal() (dAtA []byte, err error)

+ func (m *ListAppsRequest) MarshalTo(dAtA []byte) (int, error)

+ func (m *ListAppsRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *ListAppsRequest) Reset()

+ func (m *ListAppsRequest) Size() (n int)

+ func (m *ListAppsRequest) String() string

+ func (m *ListAppsRequest) Unmarshal(dAtA []byte) error

+ func (m *ListAppsRequest) XXX_DiscardUnknown()

+ func (m *ListAppsRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ListAppsRequest) XXX_Merge(src proto.Message)

+ func (m *ListAppsRequest) XXX_Size() int

+ func (m *ListAppsRequest) XXX_Unmarshal(b []byte) error

+ type ListRefsRequest struct

+ Repo *v1alpha1.Repository

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*ListRefsRequest) Descriptor() ([]byte, []int)

+ func (*ListRefsRequest) ProtoMessage()

+ func (m *ListRefsRequest) GetRepo() *v1alpha1.Repository

+ func (m *ListRefsRequest) Marshal() (dAtA []byte, err error)

+ func (m *ListRefsRequest) MarshalTo(dAtA []byte) (int, error)

+ func (m *ListRefsRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *ListRefsRequest) Reset()

+ func (m *ListRefsRequest) Size() (n int)

+ func (m *ListRefsRequest) String() string

+ func (m *ListRefsRequest) Unmarshal(dAtA []byte) error

+ func (m *ListRefsRequest) XXX_DiscardUnknown()

+ func (m *ListRefsRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ListRefsRequest) XXX_Merge(src proto.Message)

+ func (m *ListRefsRequest) XXX_Size() int

+ func (m *ListRefsRequest) XXX_Unmarshal(b []byte) error

+ type ManifestRequest struct

+ ApiVersions []string

+ AppLabelKey string

+ AppName string

+ ApplicationSource *v1alpha1.ApplicationSource

+ KubeVersion string

+ KustomizeOptions *v1alpha1.KustomizeOptions

+ Namespace string

+ NoCache bool

+ Plugins []*v1alpha1.ConfigManagementPlugin

+ Repo *v1alpha1.Repository

+ Repos []*v1alpha1.Repository

+ Revision string

+ VerifySignature bool

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*ManifestRequest) Descriptor() ([]byte, []int)

+ func (*ManifestRequest) ProtoMessage()

+ func (m *ManifestRequest) GetApiVersions() []string

+ func (m *ManifestRequest) GetAppLabelKey() string

+ func (m *ManifestRequest) GetAppName() string

+ func (m *ManifestRequest) GetApplicationSource() *v1alpha1.ApplicationSource

+ func (m *ManifestRequest) GetKubeVersion() string

+ func (m *ManifestRequest) GetKustomizeOptions() *v1alpha1.KustomizeOptions

+ func (m *ManifestRequest) GetNamespace() string

+ func (m *ManifestRequest) GetNoCache() bool

+ func (m *ManifestRequest) GetPlugins() []*v1alpha1.ConfigManagementPlugin

+ func (m *ManifestRequest) GetRepo() *v1alpha1.Repository

+ func (m *ManifestRequest) GetRepos() []*v1alpha1.Repository

+ func (m *ManifestRequest) GetRevision() string

+ func (m *ManifestRequest) GetVerifySignature() bool

+ func (m *ManifestRequest) Marshal() (dAtA []byte, err error)

+ func (m *ManifestRequest) MarshalTo(dAtA []byte) (int, error)

+ func (m *ManifestRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *ManifestRequest) Reset()

+ func (m *ManifestRequest) Size() (n int)

+ func (m *ManifestRequest) String() string

+ func (m *ManifestRequest) Unmarshal(dAtA []byte) error

+ func (m *ManifestRequest) XXX_DiscardUnknown()

+ func (m *ManifestRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ManifestRequest) XXX_Merge(src proto.Message)

+ func (m *ManifestRequest) XXX_Size() int

+ func (m *ManifestRequest) XXX_Unmarshal(b []byte) error

+ type ManifestResponse struct

+ Manifests []string

+ Namespace string

+ Revision string

+ Server string

+ SourceType string

+ VerifyResult string

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*ManifestResponse) Descriptor() ([]byte, []int)

+ func (*ManifestResponse) ProtoMessage()

+ func (m *ManifestResponse) GetManifests() []string

+ func (m *ManifestResponse) GetNamespace() string

+ func (m *ManifestResponse) GetRevision() string

+ func (m *ManifestResponse) GetServer() string

+ func (m *ManifestResponse) GetSourceType() string

+ func (m *ManifestResponse) GetVerifyResult() string

+ func (m *ManifestResponse) Marshal() (dAtA []byte, err error)

+ func (m *ManifestResponse) MarshalTo(dAtA []byte) (int, error)

+ func (m *ManifestResponse) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *ManifestResponse) Reset()

+ func (m *ManifestResponse) Size() (n int)

+ func (m *ManifestResponse) String() string

+ func (m *ManifestResponse) Unmarshal(dAtA []byte) error

+ func (m *ManifestResponse) XXX_DiscardUnknown()

+ func (m *ManifestResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ManifestResponse) XXX_Merge(src proto.Message)

+ func (m *ManifestResponse) XXX_Size() int

+ func (m *ManifestResponse) XXX_Unmarshal(b []byte) error

+ type Refs struct

+ Branches []string

+ Tags []string

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*Refs) Descriptor() ([]byte, []int)

+ func (*Refs) ProtoMessage()

+ func (m *Refs) GetBranches() []string

+ func (m *Refs) GetTags() []string

+ func (m *Refs) Marshal() (dAtA []byte, err error)

+ func (m *Refs) MarshalTo(dAtA []byte) (int, error)

+ func (m *Refs) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *Refs) Reset()

+ func (m *Refs) Size() (n int)

+ func (m *Refs) String() string

+ func (m *Refs) Unmarshal(dAtA []byte) error

+ func (m *Refs) XXX_DiscardUnknown()

+ func (m *Refs) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *Refs) XXX_Merge(src proto.Message)

+ func (m *Refs) XXX_Size() int

+ func (m *Refs) XXX_Unmarshal(b []byte) error

+ type RepoAppDetailsResponse struct

+ Directory *DirectoryAppSpec

+ Helm *HelmAppSpec

+ Ksonnet *KsonnetAppSpec

+ Kustomize *KustomizeAppSpec

+ Type string

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*RepoAppDetailsResponse) Descriptor() ([]byte, []int)

+ func (*RepoAppDetailsResponse) ProtoMessage()

+ func (m *RepoAppDetailsResponse) GetDirectory() *DirectoryAppSpec

+ func (m *RepoAppDetailsResponse) GetHelm() *HelmAppSpec

+ func (m *RepoAppDetailsResponse) GetKsonnet() *KsonnetAppSpec

+ func (m *RepoAppDetailsResponse) GetKustomize() *KustomizeAppSpec

+ func (m *RepoAppDetailsResponse) GetType() string

+ func (m *RepoAppDetailsResponse) Marshal() (dAtA []byte, err error)

+ func (m *RepoAppDetailsResponse) MarshalTo(dAtA []byte) (int, error)

+ func (m *RepoAppDetailsResponse) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *RepoAppDetailsResponse) Reset()

+ func (m *RepoAppDetailsResponse) Size() (n int)

+ func (m *RepoAppDetailsResponse) String() string

+ func (m *RepoAppDetailsResponse) Unmarshal(dAtA []byte) error

+ func (m *RepoAppDetailsResponse) XXX_DiscardUnknown()

+ func (m *RepoAppDetailsResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *RepoAppDetailsResponse) XXX_Merge(src proto.Message)

+ func (m *RepoAppDetailsResponse) XXX_Size() int

+ func (m *RepoAppDetailsResponse) XXX_Unmarshal(b []byte) error

+ type RepoServerAppDetailsQuery struct

+ AppName string

+ KustomizeOptions *v1alpha1.KustomizeOptions

+ Repo *v1alpha1.Repository

+ Repos []*v1alpha1.Repository

+ Source *v1alpha1.ApplicationSource

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*RepoServerAppDetailsQuery) Descriptor() ([]byte, []int)

+ func (*RepoServerAppDetailsQuery) ProtoMessage()

+ func (m *RepoServerAppDetailsQuery) GetAppName() string

+ func (m *RepoServerAppDetailsQuery) GetKustomizeOptions() *v1alpha1.KustomizeOptions

+ func (m *RepoServerAppDetailsQuery) GetRepo() *v1alpha1.Repository

+ func (m *RepoServerAppDetailsQuery) GetRepos() []*v1alpha1.Repository

+ func (m *RepoServerAppDetailsQuery) GetSource() *v1alpha1.ApplicationSource

+ func (m *RepoServerAppDetailsQuery) Marshal() (dAtA []byte, err error)

+ func (m *RepoServerAppDetailsQuery) MarshalTo(dAtA []byte) (int, error)

+ func (m *RepoServerAppDetailsQuery) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *RepoServerAppDetailsQuery) Reset()

+ func (m *RepoServerAppDetailsQuery) Size() (n int)

+ func (m *RepoServerAppDetailsQuery) String() string

+ func (m *RepoServerAppDetailsQuery) Unmarshal(dAtA []byte) error

+ func (m *RepoServerAppDetailsQuery) XXX_DiscardUnknown()

+ func (m *RepoServerAppDetailsQuery) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *RepoServerAppDetailsQuery) XXX_Merge(src proto.Message)

+ func (m *RepoServerAppDetailsQuery) XXX_Size() int

+ func (m *RepoServerAppDetailsQuery) XXX_Unmarshal(b []byte) error

+ type RepoServerRevisionMetadataRequest struct

+ CheckSignature bool

+ Repo *v1alpha1.Repository

+ Revision string

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*RepoServerRevisionMetadataRequest) Descriptor() ([]byte, []int)

+ func (*RepoServerRevisionMetadataRequest) ProtoMessage()

+ func (m *RepoServerRevisionMetadataRequest) GetCheckSignature() bool

+ func (m *RepoServerRevisionMetadataRequest) GetRepo() *v1alpha1.Repository

+ func (m *RepoServerRevisionMetadataRequest) GetRevision() string

+ func (m *RepoServerRevisionMetadataRequest) Marshal() (dAtA []byte, err error)

+ func (m *RepoServerRevisionMetadataRequest) MarshalTo(dAtA []byte) (int, error)

+ func (m *RepoServerRevisionMetadataRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *RepoServerRevisionMetadataRequest) Reset()

+ func (m *RepoServerRevisionMetadataRequest) Size() (n int)

+ func (m *RepoServerRevisionMetadataRequest) String() string

+ func (m *RepoServerRevisionMetadataRequest) Unmarshal(dAtA []byte) error

+ func (m *RepoServerRevisionMetadataRequest) XXX_DiscardUnknown()

+ func (m *RepoServerRevisionMetadataRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *RepoServerRevisionMetadataRequest) XXX_Merge(src proto.Message)

+ func (m *RepoServerRevisionMetadataRequest) XXX_Size() int

+ func (m *RepoServerRevisionMetadataRequest) XXX_Unmarshal(b []byte) error

+ type RepoServerServiceClient interface

+ GenerateManifest func(ctx context.Context, in *ManifestRequest, opts ...grpc.CallOption) (*ManifestResponse, error)

+ GetAppDetails func(ctx context.Context, in *RepoServerAppDetailsQuery, opts ...grpc.CallOption) (*RepoAppDetailsResponse, error)

+ GetHelmCharts func(ctx context.Context, in *HelmChartsRequest, opts ...grpc.CallOption) (*HelmChartsResponse, error)

+ GetRevisionMetadata func(ctx context.Context, in *RepoServerRevisionMetadataRequest, ...) (*v1alpha1.RevisionMetadata, error)

+ ListApps func(ctx context.Context, in *ListAppsRequest, opts ...grpc.CallOption) (*AppList, error)

+ ListRefs func(ctx context.Context, in *ListRefsRequest, opts ...grpc.CallOption) (*Refs, error)

+ func NewRepoServerServiceClient(cc *grpc.ClientConn) RepoServerServiceClient

+ type RepoServerServiceServer interface

+ GenerateManifest func(context.Context, *ManifestRequest) (*ManifestResponse, error)

+ GetAppDetails func(context.Context, *RepoServerAppDetailsQuery) (*RepoAppDetailsResponse, error)

+ GetHelmCharts func(context.Context, *HelmChartsRequest) (*HelmChartsResponse, error)

+ GetRevisionMetadata func(context.Context, *RepoServerRevisionMetadataRequest) (*v1alpha1.RevisionMetadata, error)

+ ListApps func(context.Context, *ListAppsRequest) (*AppList, error)

+ ListRefs func(context.Context, *ListRefsRequest) (*Refs, error)

+ type TLSConfiguration struct

+ Certificates *x509.CertPool

+ DisableTLS bool

+ StrictValidation bool

+ type UnimplementedRepoServerServiceServer struct

+ func (*UnimplementedRepoServerServiceServer) GenerateManifest(ctx context.Context, req *ManifestRequest) (*ManifestResponse, error)

+ func (*UnimplementedRepoServerServiceServer) GetAppDetails(ctx context.Context, req *RepoServerAppDetailsQuery) (*RepoAppDetailsResponse, error)

+ func (*UnimplementedRepoServerServiceServer) GetHelmCharts(ctx context.Context, req *HelmChartsRequest) (*HelmChartsResponse, error)

+ func (*UnimplementedRepoServerServiceServer) GetRevisionMetadata(ctx context.Context, req *RepoServerRevisionMetadataRequest) (*v1alpha1.RevisionMetadata, error)

+ func (*UnimplementedRepoServerServiceServer) ListApps(ctx context.Context, req *ListAppsRequest) (*AppList, error)

+ func (*UnimplementedRepoServerServiceServer) ListRefs(ctx context.Context, req *ListRefsRequest) (*Refs, error)

Apr 5, 2021 GO-2022-0304 +20 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

Apr 2, 2021 GO-2022-0304 +20 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd