repocreds

Feb 3, 2025 GO-2025-3427

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

Feb 3, 2025 GO-2025-3427

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

Changes in this version

type RepoCredsServiceClient

+ CreateWriteRepositoryCredentials func(ctx context.Context, in *RepoCredsCreateRequest, opts ...grpc.CallOption) (*v1alpha1.RepoCreds, error)

+ DeleteWriteRepositoryCredentials func(ctx context.Context, in *RepoCredsDeleteRequest, opts ...grpc.CallOption) (*RepoCredsResponse, error)

+ ListWriteRepositoryCredentials func(ctx context.Context, in *RepoCredsQuery, opts ...grpc.CallOption) (*v1alpha1.RepoCredsList, error)

+ UpdateWriteRepositoryCredentials func(ctx context.Context, in *RepoCredsUpdateRequest, opts ...grpc.CallOption) (*v1alpha1.RepoCreds, error)

type RepoCredsServiceServer

+ CreateWriteRepositoryCredentials func(context.Context, *RepoCredsCreateRequest) (*v1alpha1.RepoCreds, error)

+ DeleteWriteRepositoryCredentials func(context.Context, *RepoCredsDeleteRequest) (*RepoCredsResponse, error)

+ ListWriteRepositoryCredentials func(context.Context, *RepoCredsQuery) (*v1alpha1.RepoCredsList, error)

+ UpdateWriteRepositoryCredentials func(context.Context, *RepoCredsUpdateRequest) (*v1alpha1.RepoCreds, error)

type UnimplementedRepoCredsServiceServer

+ func (*UnimplementedRepoCredsServiceServer) CreateWriteRepositoryCredentials(ctx context.Context, req *RepoCredsCreateRequest) (*v1alpha1.RepoCreds, error)

+ func (*UnimplementedRepoCredsServiceServer) DeleteWriteRepositoryCredentials(ctx context.Context, req *RepoCredsDeleteRequest) (*RepoCredsResponse, error)

+ func (*UnimplementedRepoCredsServiceServer) ListWriteRepositoryCredentials(ctx context.Context, req *RepoCredsQuery) (*v1alpha1.RepoCredsList, error)

+ func (*UnimplementedRepoCredsServiceServer) UpdateWriteRepositoryCredentials(ctx context.Context, req *RepoCredsUpdateRequest) (*v1alpha1.RepoCreds, error)

Jan 29, 2025 GO-2025-3427

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

Jan 21, 2025 GO-2025-3427

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

Jan 8, 2025 GO-2025-3427

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

Dec 23, 2024 GO-2025-3427

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

Dec 18, 2024 GO-2025-3427

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

Dec 17, 2024 GO-2025-3427

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

Dec 17, 2024 GO-2025-3427

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

Jan 29, 2025 GO-2025-3427

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

Jan 3, 2025 GO-2025-3427 +1 more

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Dec 11, 2024 GO-2025-3427 +1 more

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Nov 20, 2024 GO-2025-3427 +1 more

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Sep 16, 2024 GO-2025-3427 +1 more

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Oct 18, 2024 GO-2025-3427

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

Oct 17, 2024 GO-2025-3427

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

Oct 7, 2024 GO-2025-3427

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

Sep 20, 2024 GO-2025-3427

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

Sep 16, 2024 GO-2025-3427

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

Jan 29, 2025 GO-2025-3427

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

Jan 3, 2025 GO-2025-3427 +1 more

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Dec 11, 2024 GO-2025-3427 +1 more

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Nov 5, 2024 GO-2025-3427 +1 more

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Oct 18, 2024 GO-2025-3427 +1 more

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Oct 17, 2024 GO-2025-3427 +1 more

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Sep 26, 2024 GO-2025-3427 +1 more

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Aug 27, 2024 GO-2025-3427 +1 more

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Aug 23, 2024 GO-2025-3427 +1 more

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Aug 16, 2024 GO-2025-3427 +1 more

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Aug 5, 2024 GO-2025-3427 +1 more

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Aug 1, 2024 GO-2025-3427

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

Jul 15, 2024 GO-2025-3427

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

Jul 2, 2024 GO-2025-3427

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

Jun 24, 2024 GO-2025-3427

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

Jun 18, 2024 GO-2025-3427

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

Jan 29, 2025 GO-2025-3427

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

Nov 5, 2024 GO-2025-3427 +1 more

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Oct 18, 2024 GO-2025-3427 +1 more

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Oct 17, 2024 GO-2025-3427 +1 more

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Sep 26, 2024 GO-2025-3427 +1 more

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Sep 11, 2024 GO-2025-3427 +1 more

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jul 24, 2024 GO-2025-3427 +1 more

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jul 22, 2024 GO-2024-3006 +2 more

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jul 15, 2024 GO-2024-3002 +3 more

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jul 2, 2024 GO-2024-3002 +3 more

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jun 6, 2024 GO-2024-3002 +3 more

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

May 23, 2024 GO-2024-2898 +5 more

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

May 21, 2024 GO-2024-2898 +5 more

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

May 7, 2024 GO-2024-2877 +6 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Apr 29, 2024 GO-2024-2877 +2 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Apr 15, 2024 GO-2024-2877 +2 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Apr 5, 2024 GO-2024-2877 +2 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Oct 17, 2024 GO-2025-3427 +1 more

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Sep 26, 2024 GO-2025-3427 +1 more

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jul 24, 2024 GO-2025-3427 +1 more

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jul 22, 2024 GO-2024-3006 +2 more

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jul 15, 2024 GO-2024-3002 +3 more

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jul 2, 2024 GO-2024-3002 +3 more

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jun 6, 2024 GO-2024-3002 +3 more

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

May 23, 2024 GO-2024-2898 +5 more

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

May 21, 2024 GO-2024-2898 +5 more

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Apr 30, 2024 GO-2024-2877 +6 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Apr 26, 2024 GO-2024-2877 +6 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Apr 15, 2024 GO-2024-2792 +7 more

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Apr 5, 2024 GO-2024-2728 +8 more

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Mar 28, 2024 GO-2024-2728 +8 more

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Mar 18, 2024 GO-2024-2667 +9 more

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Mar 13, 2024 GO-2024-2652 +11 more

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Mar 1, 2024 GO-2024-2643 +13 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Feb 13, 2024 GO-2024-2643 +13 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Feb 5, 2024 GO-2024-2643 +13 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Feb 2, 2024 GO-2024-2877 +2 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jan 25, 2024 GO-2024-2877 +2 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jan 19, 2024 GO-2024-2877 +2 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jan 18, 2024 GO-2024-2877 +2 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Dec 18, 2023 GO-2024-2877 +2 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Aug 22, 2024 GO-2025-3427 +1 more

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jul 24, 2024 GO-2025-3427 +1 more

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jul 22, 2024 GO-2024-3006 +2 more

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jul 15, 2024 GO-2024-3002 +3 more

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jul 2, 2024 GO-2024-3002 +3 more

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jun 6, 2024 GO-2024-3002 +3 more

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

May 23, 2024 GO-2024-2898 +5 more

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

May 21, 2024 GO-2024-2898 +5 more

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Apr 30, 2024 GO-2024-2877 +6 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Apr 26, 2024 GO-2024-2877 +6 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Apr 15, 2024 GO-2024-2792 +7 more

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Apr 4, 2024 GO-2024-2728 +8 more

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Mar 28, 2024 GO-2024-2728 +8 more

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Mar 18, 2024 GO-2024-2667 +9 more

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Mar 13, 2024 GO-2024-2652 +11 more

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Mar 1, 2024 GO-2024-2643 +13 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Feb 2, 2024 GO-2024-2643 +13 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jan 19, 2024 GO-2024-2643 +13 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jan 18, 2024 GO-2024-2643 +13 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Dec 1, 2023 GO-2024-2643 +13 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Nov 20, 2023 GO-2024-2643 +12 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Nov 14, 2023 GO-2024-2643 +12 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Nov 6, 2023 GO-2024-2643 +12 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Oct 31, 2023 GO-2024-2877 +5 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Oct 25, 2023 GO-2024-2877 +5 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Oct 3, 2023 GO-2024-2877 +5 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Sep 25, 2023 GO-2024-2877 +5 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Aug 21, 2024 GO-2024-2898 +4 more

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

May 23, 2024 GO-2024-2898 +4 more

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

May 21, 2024 GO-2024-2898 +4 more

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Apr 30, 2024 GO-2024-2877 +5 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Apr 26, 2024 GO-2024-2877 +5 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Apr 15, 2024 GO-2024-2792 +6 more

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Apr 4, 2024 GO-2024-2728 +7 more

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Mar 28, 2024 GO-2024-2728 +7 more

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Mar 18, 2024 GO-2024-2667 +8 more

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Mar 13, 2024 GO-2024-2652 +10 more

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Mar 1, 2024 GO-2024-2643 +12 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Feb 2, 2024 GO-2024-2643 +12 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jan 19, 2024 GO-2024-2643 +12 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jan 19, 2024 GO-2024-2643 +12 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Nov 20, 2023 GO-2024-2643 +12 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Oct 31, 2023 GO-2024-2643 +12 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Oct 26, 2023 GO-2024-2643 +12 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Sep 13, 2023 GO-2024-2643 +12 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Sep 7, 2023 GO-2024-2643 +12 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Aug 24, 2023 GO-2023-2049 +14 more

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Aug 21, 2023 GO-2023-2049 +14 more

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Aug 7, 2023 GO-2023-2018 +15 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Aug 3, 2023 GO-2024-2643 +12 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jul 27, 2023 GO-2024-2643 +12 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jul 19, 2023 GO-2024-2643 +12 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jul 18, 2023 GO-2024-2643 +12 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jul 12, 2023 GO-2024-2643 +12 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jul 5, 2023 GO-2024-2643 +12 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jun 27, 2023 GO-2024-2643 +12 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Apr 4, 2024 GO-2024-2643 +12 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Feb 2, 2024 GO-2024-2643 +12 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jan 19, 2024 GO-2024-2643 +12 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Nov 2, 2023 GO-2024-2643 +12 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Sep 7, 2023 GO-2024-2643 +12 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Aug 24, 2023 GO-2023-2049 +14 more

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Aug 21, 2023 GO-2023-2049 +14 more

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Aug 7, 2023 GO-2023-2018 +15 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jul 31, 2023 GO-2023-2018 +15 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jul 24, 2023 GO-2023-2018 +15 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jul 19, 2023 GO-2023-2018 +15 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jul 5, 2023 GO-2023-2018 +15 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jun 20, 2023 GO-2023-2018 +15 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jun 16, 2023 GO-2023-2018 +15 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jun 5, 2023 GO-2023-2018 +15 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

May 24, 2023 GO-2023-2018 +15 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

May 12, 2023 GO-2023-2018 +15 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

May 2, 2023 GO-2023-2018 +15 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

May 2, 2023 GO-2023-2018 +15 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Apr 11, 2023 GO-2024-2643 +12 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Mar 27, 2023 GO-2024-2643 +12 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Sep 7, 2023 GO-2024-2643 +12 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Aug 7, 2023 GO-2023-2049 +14 more

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jul 19, 2023 GO-2023-2018 +15 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jul 5, 2023 GO-2023-2018 +15 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jun 20, 2023 GO-2023-2018 +15 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jun 16, 2023 GO-2023-2018 +15 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jun 5, 2023 GO-2023-2018 +15 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

May 25, 2023 GO-2023-2018 +15 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Mar 23, 2023 GO-2023-2018 +15 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Mar 16, 2023 GO-2023-1670 +16 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Mar 14, 2023 GO-2023-1670 +16 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Mar 7, 2023 GO-2023-1670 +16 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Feb 27, 2023 GO-2023-1670 +16 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Feb 16, 2023 GO-2023-1670 +16 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Feb 8, 2023 GO-2023-1577 +17 more

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Feb 6, 2023 GO-2023-1548 +18 more

  GO-2023-1548: Repository access credential leak in github.com/argoproj/argo-cd/v2

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Feb 2, 2023 GO-2023-1548 +14 more

  GO-2023-1548: Repository access credential leak in github.com/argoproj/argo-cd/v2

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jan 27, 2023 GO-2023-1548 +14 more

  GO-2023-1548: Repository access credential leak in github.com/argoproj/argo-cd/v2

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jan 25, 2023 GO-2023-1548 +14 more

  GO-2023-1548: Repository access credential leak in github.com/argoproj/argo-cd/v2

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jan 18, 2023 GO-2023-1512 +16 more

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1548: Repository access credential leak in github.com/argoproj/argo-cd/v2

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jan 13, 2023 GO-2023-1520 +15 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1548: Repository access credential leak in github.com/argoproj/argo-cd/v2

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jan 5, 2023 GO-2023-1520 +15 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1548: Repository access credential leak in github.com/argoproj/argo-cd/v2

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Dec 19, 2022 GO-2023-1520 +15 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1548: Repository access credential leak in github.com/argoproj/argo-cd/v2

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Aug 7, 2023 GO-2023-2049 +13 more

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jul 19, 2023 GO-2023-2049 +13 more

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jul 5, 2023 GO-2023-2049 +13 more

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jun 16, 2023 GO-2023-2049 +13 more

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jun 5, 2023 GO-2023-2049 +13 more

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

May 25, 2023 GO-2023-2049 +13 more

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Mar 23, 2023 GO-2023-2049 +13 more

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Mar 16, 2023 GO-2023-1670 +14 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Mar 14, 2023 GO-2023-1670 +14 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Mar 7, 2023 GO-2023-1670 +14 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Feb 27, 2023 GO-2023-1670 +14 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Feb 16, 2023 GO-2023-1670 +14 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Feb 2, 2023 GO-2023-1577 +15 more

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jan 27, 2023 GO-2023-1577 +15 more

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jan 25, 2023 GO-2023-1577 +15 more

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jan 18, 2023 GO-2023-1512 +17 more

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jan 10, 2023 GO-2023-1512 +17 more

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Dec 16, 2022 GO-2023-1512 +17 more

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Dec 6, 2022 GO-2023-1512 +17 more

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Nov 28, 2022 GO-2023-1512 +17 more

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Nov 7, 2022 GO-2023-1512 +17 more

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Nov 1, 2022 GO-2023-1512 +17 more

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Oct 24, 2022 GO-2023-1512 +17 more

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Oct 17, 2022 GO-2023-1512 +14 more

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Oct 11, 2022 GO-2023-1512 +14 more

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Oct 5, 2022 GO-2023-1512 +14 more

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Mar 23, 2023 GO-2023-2049 +13 more

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Mar 16, 2023 GO-2023-1670 +14 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Mar 14, 2023 GO-2023-1670 +14 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Mar 7, 2023 GO-2023-1670 +14 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Feb 27, 2023 GO-2023-1670 +14 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Feb 16, 2023 GO-2023-1670 +14 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Feb 2, 2023 GO-2023-1577 +15 more

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jan 27, 2023 GO-2023-1577 +15 more

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jan 25, 2023 GO-2023-1577 +15 more

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jan 18, 2023 GO-2023-1520 +16 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Dec 16, 2022 GO-2023-1520 +16 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Nov 7, 2022 GO-2023-1520 +16 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Nov 1, 2022 GO-2023-1520 +16 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Oct 17, 2022 GO-2023-1520 +16 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Oct 5, 2022 GO-2023-1520 +16 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Oct 3, 2022 GO-2023-1520 +16 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Sep 16, 2022 GO-2023-1520 +16 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Aug 22, 2022 GO-2023-1520 +16 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Aug 17, 2022 GO-2023-1520 +16 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Aug 11, 2022 GO-2023-1520 +16 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jul 29, 2022 GO-2023-1520 +16 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jul 18, 2022 GO-2023-1520 +16 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jul 12, 2022 GO-2023-1520 +16 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jul 12, 2022 GO-2023-1520 +16 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jul 7, 2022 GO-2022-0517 +18 more

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jun 27, 2022 GO-2022-0517 +18 more

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jun 21, 2022 GO-2022-0517 +18 more

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jun 21, 2022 GO-2022-0517 +18 more

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jun 10, 2022 GO-2022-0495 +22 more

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jun 6, 2022 GO-2023-1670 +11 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jun 1, 2022 GO-2023-1670 +11 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

May 31, 2022 GO-2023-1670 +11 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

May 18, 2022 GO-2023-1670 +11 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

May 6, 2022 GO-2023-1670 +11 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Feb 16, 2023 GO-2023-1670 +11 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Feb 2, 2023 GO-2023-1577 +12 more

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jan 27, 2023 GO-2023-1577 +12 more

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jan 25, 2023 GO-2023-1577 +12 more

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jan 18, 2023 GO-2023-1520 +13 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Dec 16, 2022 GO-2023-1520 +13 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Nov 1, 2022 GO-2023-1520 +13 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Oct 17, 2022 GO-2023-1520 +13 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Oct 5, 2022 GO-2023-1520 +13 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Oct 3, 2022 GO-2023-1520 +13 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jul 29, 2022 GO-2023-1520 +13 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jul 12, 2022 GO-2023-1520 +13 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jun 21, 2022 GO-2022-0517 +15 more

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

May 18, 2022 GO-2022-0495 +19 more

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Mar 29, 2022 GO-2022-0453 +22 more

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Mar 23, 2022 GO-2022-0453 +22 more

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Mar 10, 2022 GO-2022-0359 +24 more

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Mar 6, 2022 GO-2022-0359 +24 more

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Feb 4, 2022 GO-2022-0357 +15 more

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Feb 3, 2022 GO-2022-0357 +15 more

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Feb 2, 2022 GO-2022-0357 +15 more

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jan 30, 2022 GO-2022-0357 +15 more

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Nov 1, 2022 GO-2023-1520 +13 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Oct 18, 2022 GO-2023-1520 +13 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Oct 5, 2022 GO-2023-1520 +13 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Oct 3, 2022 GO-2023-1520 +13 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jul 29, 2022 GO-2023-1520 +13 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jul 12, 2022 GO-2023-1520 +13 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jun 21, 2022 GO-2022-0518 +14 more

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

May 18, 2022 GO-2022-0495 +18 more

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Mar 23, 2022 GO-2022-0453 +21 more

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Mar 28, 2022 GO-2022-0359 +23 more

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Mar 9, 2022 GO-2022-0359 +23 more

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Mar 6, 2022 GO-2022-0359 +23 more

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Feb 5, 2022 GO-2022-0357 +25 more

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Feb 3, 2022 GO-2022-0357 +25 more

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jan 18, 2022 GO-2022-0304 +26 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jan 1, 2022 GO-2022-0304 +26 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Dec 17, 2021 GO-2022-0304 +26 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Dec 14, 2021 GO-2022-0304 +26 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Nov 12, 2021 GO-2022-0518 +13 more

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jun 21, 2022 GO-2022-0518 +13 more

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

May 18, 2022 GO-2022-0495 +17 more

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Mar 23, 2022 GO-2022-0453 +20 more

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Mar 22, 2022 GO-2022-0359 +22 more

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Mar 9, 2022 GO-2022-0359 +22 more

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Mar 6, 2022 GO-2022-0359 +22 more

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Feb 5, 2022 GO-2022-0357 +24 more

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Feb 3, 2022 GO-2022-0357 +24 more

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Dec 13, 2021 GO-2022-0304 +25 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Nov 17, 2021 GO-2022-0304 +25 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Oct 28, 2021 GO-2022-0304 +25 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Oct 20, 2021 GO-2022-0304 +25 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Oct 20, 2021 GO-2022-0304 +25 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Sep 29, 2021 GO-2022-0304 +25 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Sep 2, 2021 GO-2022-0304 +25 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Nov 19, 2021 GO-2022-0304 +25 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Aug 25, 2021 GO-2022-0304 +25 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Aug 20, 2021 GO-2022-0304 +25 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Aug 11, 2021 GO-2022-0304 +25 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Aug 3, 2021 GO-2022-0304 +25 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jul 28, 2021 GO-2022-0304 +25 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jul 22, 2021 GO-2022-0304 +25 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Jun 23, 2021 GO-2022-0304 +25 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

May 27, 2021 GO-2022-0304 +25 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

May 20, 2021 GO-2022-0304 +25 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Apr 15, 2021 GO-2022-0304 +25 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Apr 7, 2021 GO-2022-0304 +25 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Changes in this version

+ var ErrIntOverflowRepocreds = fmt.Errorf("proto: integer overflow")

+ var ErrInvalidLengthRepocreds = fmt.Errorf("proto: negative length found during unmarshaling")

+ var ErrUnexpectedEndOfGroupRepocreds = fmt.Errorf("proto: unexpected end of group")

+ func RegisterRepoCredsServiceHandler(ctx context.Context, mux *runtime.ServeMux, conn *grpc.ClientConn) error

+ func RegisterRepoCredsServiceHandlerClient(ctx context.Context, mux *runtime.ServeMux, client RepoCredsServiceClient) error

+ func RegisterRepoCredsServiceHandlerFromEndpoint(ctx context.Context, mux *runtime.ServeMux, endpoint string, ...) (err error)

+ func RegisterRepoCredsServiceHandlerServer(ctx context.Context, mux *runtime.ServeMux, server RepoCredsServiceServer) error

+ func RegisterRepoCredsServiceServer(s *grpc.Server, srv RepoCredsServiceServer)

+ type RepoCredsCreateRequest struct

+ Creds *v1alpha1.RepoCreds

+ Upsert bool

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*RepoCredsCreateRequest) Descriptor() ([]byte, []int)

+ func (*RepoCredsCreateRequest) ProtoMessage()

+ func (m *RepoCredsCreateRequest) GetCreds() *v1alpha1.RepoCreds

+ func (m *RepoCredsCreateRequest) GetUpsert() bool

+ func (m *RepoCredsCreateRequest) Marshal() (dAtA []byte, err error)

+ func (m *RepoCredsCreateRequest) MarshalTo(dAtA []byte) (int, error)

+ func (m *RepoCredsCreateRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *RepoCredsCreateRequest) Reset()

+ func (m *RepoCredsCreateRequest) Size() (n int)

+ func (m *RepoCredsCreateRequest) String() string

+ func (m *RepoCredsCreateRequest) Unmarshal(dAtA []byte) error

+ func (m *RepoCredsCreateRequest) XXX_DiscardUnknown()

+ func (m *RepoCredsCreateRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *RepoCredsCreateRequest) XXX_Merge(src proto.Message)

+ func (m *RepoCredsCreateRequest) XXX_Size() int

+ func (m *RepoCredsCreateRequest) XXX_Unmarshal(b []byte) error

+ type RepoCredsDeleteRequest struct

+ Url string

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*RepoCredsDeleteRequest) Descriptor() ([]byte, []int)

+ func (*RepoCredsDeleteRequest) ProtoMessage()

+ func (m *RepoCredsDeleteRequest) GetUrl() string

+ func (m *RepoCredsDeleteRequest) Marshal() (dAtA []byte, err error)

+ func (m *RepoCredsDeleteRequest) MarshalTo(dAtA []byte) (int, error)

+ func (m *RepoCredsDeleteRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *RepoCredsDeleteRequest) Reset()

+ func (m *RepoCredsDeleteRequest) Size() (n int)

+ func (m *RepoCredsDeleteRequest) String() string

+ func (m *RepoCredsDeleteRequest) Unmarshal(dAtA []byte) error

+ func (m *RepoCredsDeleteRequest) XXX_DiscardUnknown()

+ func (m *RepoCredsDeleteRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *RepoCredsDeleteRequest) XXX_Merge(src proto.Message)

+ func (m *RepoCredsDeleteRequest) XXX_Size() int

+ func (m *RepoCredsDeleteRequest) XXX_Unmarshal(b []byte) error

+ type RepoCredsQuery struct

+ Url string

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*RepoCredsQuery) Descriptor() ([]byte, []int)

+ func (*RepoCredsQuery) ProtoMessage()

+ func (m *RepoCredsQuery) GetUrl() string

+ func (m *RepoCredsQuery) Marshal() (dAtA []byte, err error)

+ func (m *RepoCredsQuery) MarshalTo(dAtA []byte) (int, error)

+ func (m *RepoCredsQuery) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *RepoCredsQuery) Reset()

+ func (m *RepoCredsQuery) Size() (n int)

+ func (m *RepoCredsQuery) String() string

+ func (m *RepoCredsQuery) Unmarshal(dAtA []byte) error

+ func (m *RepoCredsQuery) XXX_DiscardUnknown()

+ func (m *RepoCredsQuery) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *RepoCredsQuery) XXX_Merge(src proto.Message)

+ func (m *RepoCredsQuery) XXX_Size() int

+ func (m *RepoCredsQuery) XXX_Unmarshal(b []byte) error

+ type RepoCredsResponse struct

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*RepoCredsResponse) Descriptor() ([]byte, []int)

+ func (*RepoCredsResponse) ProtoMessage()

+ func (m *RepoCredsResponse) Marshal() (dAtA []byte, err error)

+ func (m *RepoCredsResponse) MarshalTo(dAtA []byte) (int, error)

+ func (m *RepoCredsResponse) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *RepoCredsResponse) Reset()

+ func (m *RepoCredsResponse) Size() (n int)

+ func (m *RepoCredsResponse) String() string

+ func (m *RepoCredsResponse) Unmarshal(dAtA []byte) error

+ func (m *RepoCredsResponse) XXX_DiscardUnknown()

+ func (m *RepoCredsResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *RepoCredsResponse) XXX_Merge(src proto.Message)

+ func (m *RepoCredsResponse) XXX_Size() int

+ func (m *RepoCredsResponse) XXX_Unmarshal(b []byte) error

+ type RepoCredsServiceClient interface

+ CreateRepositoryCredentials func(ctx context.Context, in *RepoCredsCreateRequest, opts ...grpc.CallOption) (*v1alpha1.RepoCreds, error)

+ DeleteRepositoryCredentials func(ctx context.Context, in *RepoCredsDeleteRequest, opts ...grpc.CallOption) (*RepoCredsResponse, error)

+ ListRepositoryCredentials func(ctx context.Context, in *RepoCredsQuery, opts ...grpc.CallOption) (*v1alpha1.RepoCredsList, error)

+ UpdateRepositoryCredentials func(ctx context.Context, in *RepoCredsUpdateRequest, opts ...grpc.CallOption) (*v1alpha1.RepoCreds, error)

+ func NewRepoCredsServiceClient(cc *grpc.ClientConn) RepoCredsServiceClient

+ type RepoCredsServiceServer interface

+ CreateRepositoryCredentials func(context.Context, *RepoCredsCreateRequest) (*v1alpha1.RepoCreds, error)

+ DeleteRepositoryCredentials func(context.Context, *RepoCredsDeleteRequest) (*RepoCredsResponse, error)

+ ListRepositoryCredentials func(context.Context, *RepoCredsQuery) (*v1alpha1.RepoCredsList, error)

+ UpdateRepositoryCredentials func(context.Context, *RepoCredsUpdateRequest) (*v1alpha1.RepoCreds, error)

+ type RepoCredsUpdateRequest struct

+ Creds *v1alpha1.RepoCreds

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*RepoCredsUpdateRequest) Descriptor() ([]byte, []int)

+ func (*RepoCredsUpdateRequest) ProtoMessage()

+ func (m *RepoCredsUpdateRequest) GetCreds() *v1alpha1.RepoCreds

+ func (m *RepoCredsUpdateRequest) Marshal() (dAtA []byte, err error)

+ func (m *RepoCredsUpdateRequest) MarshalTo(dAtA []byte) (int, error)

+ func (m *RepoCredsUpdateRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *RepoCredsUpdateRequest) Reset()

+ func (m *RepoCredsUpdateRequest) Size() (n int)

+ func (m *RepoCredsUpdateRequest) String() string

+ func (m *RepoCredsUpdateRequest) Unmarshal(dAtA []byte) error

+ func (m *RepoCredsUpdateRequest) XXX_DiscardUnknown()

+ func (m *RepoCredsUpdateRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *RepoCredsUpdateRequest) XXX_Merge(src proto.Message)

+ func (m *RepoCredsUpdateRequest) XXX_Size() int

+ func (m *RepoCredsUpdateRequest) XXX_Unmarshal(b []byte) error

+ type UnimplementedRepoCredsServiceServer struct

+ func (*UnimplementedRepoCredsServiceServer) CreateRepositoryCredentials(ctx context.Context, req *RepoCredsCreateRequest) (*v1alpha1.RepoCreds, error)

+ func (*UnimplementedRepoCredsServiceServer) DeleteRepositoryCredentials(ctx context.Context, req *RepoCredsDeleteRequest) (*RepoCredsResponse, error)

+ func (*UnimplementedRepoCredsServiceServer) ListRepositoryCredentials(ctx context.Context, req *RepoCredsQuery) (*v1alpha1.RepoCredsList, error)

+ func (*UnimplementedRepoCredsServiceServer) UpdateRepositoryCredentials(ctx context.Context, req *RepoCredsUpdateRequest) (*v1alpha1.RepoCreds, error)

Apr 5, 2021 GO-2022-0304 +22 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Apr 2, 2021 GO-2022-0304 +22 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3427: ArgoCD Namespace Isolation Break in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd