v1alpha1

Mar 3, 2021 GO-2022-0304 +30 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Feb 26, 2021 GO-2022-0304 +31 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Feb 20, 2021 GO-2022-0304 +32 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Changes in this version

type ApplicationTree

+ func (t *ApplicationTree) Normalize()

type ResourceDiff

+ func (r *ResourceDiff) FullName() string

type ResourceNode

+ func (n *ResourceNode) FullName() string

Feb 5, 2021 GO-2022-0304 +32 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jan 21, 2021 GO-2022-0304 +32 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jan 10, 2021 GO-2022-0304 +32 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Dec 10, 2020 GO-2022-0304 +31 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Dec 9, 2020 GO-2022-0304 +31 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Changes in this version

type ApplicationSource

+ func (a *ApplicationSource) AllowsConcurrentProcessing() bool

+ func (a *ApplicationSource) IsHelmOci() bool

type ApplicationSourceDirectory

+ Exclude string

type ApplicationSourceHelm

+ Version string

type ApplicationSourceKsonnet

+ func (k *ApplicationSourceKsonnet) AllowsConcurrentProcessing() bool

type ApplicationSourceKustomize

+ CommonAnnotations map[string]string

+ func (k *ApplicationSourceKustomize) AllowsConcurrentProcessing() bool

type Cluster

+ ID string

+ Shard *int64

type ClusterConfig

+ ExecProviderConfig *ExecProviderConfig

+ type ExecProviderConfig struct

+ APIVersion string

+ Args []string

+ Command string

+ Env map[string]string

+ InstallHint string

+ func (*ExecProviderConfig) Descriptor() ([]byte, []int)

+ func (*ExecProviderConfig) ProtoMessage()

+ func (in *ExecProviderConfig) DeepCopy() *ExecProviderConfig

+ func (in *ExecProviderConfig) DeepCopyInto(out *ExecProviderConfig)

+ func (m *ExecProviderConfig) Marshal() (dAtA []byte, err error)

+ func (m *ExecProviderConfig) MarshalTo(dAtA []byte) (int, error)

+ func (m *ExecProviderConfig) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *ExecProviderConfig) Reset()

+ func (m *ExecProviderConfig) Size() (n int)

+ func (m *ExecProviderConfig) Unmarshal(dAtA []byte) error

+ func (m *ExecProviderConfig) XXX_DiscardUnknown()

+ func (m *ExecProviderConfig) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ExecProviderConfig) XXX_Merge(src proto.Message)

+ func (m *ExecProviderConfig) XXX_Size() int

+ func (m *ExecProviderConfig) XXX_Unmarshal(b []byte) error

+ func (this *ExecProviderConfig) String() string

type Repository

+ EnableOCI bool

type SyncPolicyAutomated

+ AllowEmpty bool

Dec 3, 2020 GO-2022-0304 +29 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Nov 25, 2020 GO-2022-0304 +29 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Mar 3, 2021 GO-2022-0304 +29 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Feb 26, 2021 GO-2022-0304 +30 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Feb 5, 2021 GO-2022-0304 +31 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Dec 10, 2020 GO-2022-0304 +31 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Nov 20, 2020 GO-2022-0304 +31 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Nov 17, 2020 GO-2022-0304 +31 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Oct 15, 2020 GO-2022-0304 +31 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Sep 29, 2020 GO-2022-0304 +31 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Sep 19, 2020 GO-2022-0304 +31 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Sep 15, 2020 GO-2022-0304 +31 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Sep 5, 2020 GO-2022-0304 +31 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Sep 1, 2020 GO-2022-0304 +31 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Aug 27, 2020 GO-2022-0304 +31 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Aug 26, 2020 GO-2022-0304 +31 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Aug 25, 2020 GO-2022-0304 +31 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Changes in this version

type AppProject

+ Status AppProjectStatus

+ func (p *AppProject) GetJWTTokenFromSpec(roleName string, issuedAt int64, id string) (*JWTToken, int, error)

+ func (p AppProject) RemoveJWTToken(roleIndex int, issuedAt int64, id string) error

+ func (proj *AppProject) NormalizeJWTTokens() bool

+ func (proj *AppProject) RemoveFinalizer()

+ func (proj AppProject) HasFinalizer() bool

type AppProjectSpec

+ ClusterResourceBlacklist []metav1.GroupKind

+ SignatureKeys []SignatureKey

+ type AppProjectStatus struct

+ JWTTokensByRole map[string]JWTTokens

+ func (*AppProjectStatus) Descriptor() ([]byte, []int)

+ func (*AppProjectStatus) ProtoMessage()

+ func (in *AppProjectStatus) DeepCopy() *AppProjectStatus

+ func (in *AppProjectStatus) DeepCopyInto(out *AppProjectStatus)

+ func (m *AppProjectStatus) Marshal() (dAtA []byte, err error)

+ func (m *AppProjectStatus) MarshalTo(dAtA []byte) (int, error)

+ func (m *AppProjectStatus) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *AppProjectStatus) Reset()

+ func (m *AppProjectStatus) Size() (n int)

+ func (m *AppProjectStatus) Unmarshal(dAtA []byte) error

+ func (m *AppProjectStatus) XXX_DiscardUnknown()

+ func (m *AppProjectStatus) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *AppProjectStatus) XXX_Merge(src proto.Message)

+ func (m *AppProjectStatus) XXX_Size() int

+ func (m *AppProjectStatus) XXX_Unmarshal(b []byte) error

+ func (this *AppProjectStatus) String() string

type ApplicationDestination

+ Name string

+ func (d *ApplicationDestination) IsServerInferred() bool

+ func (d *ApplicationDestination) MarshalJSON() ([]byte, error)

+ func (d *ApplicationDestination) SetInferredServer(server string)

type ApplicationSourceJsonnet

+ Libs []string

+ type Backoff struct

+ Duration string

+ Factor *int64

+ MaxDuration string

+ func (*Backoff) Descriptor() ([]byte, []int)

+ func (*Backoff) ProtoMessage()

+ func (in *Backoff) DeepCopy() *Backoff

+ func (in *Backoff) DeepCopyInto(out *Backoff)

+ func (m *Backoff) Marshal() (dAtA []byte, err error)

+ func (m *Backoff) MarshalTo(dAtA []byte) (int, error)

+ func (m *Backoff) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *Backoff) Reset()

+ func (m *Backoff) Size() (n int)

+ func (m *Backoff) Unmarshal(dAtA []byte) error

+ func (m *Backoff) XXX_DiscardUnknown()

+ func (m *Backoff) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *Backoff) XXX_Merge(src proto.Message)

+ func (m *Backoff) XXX_Size() int

+ func (m *Backoff) XXX_Unmarshal(b []byte) error

+ func (this *Backoff) String() string

type Cluster

+ Info ClusterInfo

+ RefreshRequestedAt *metav1.Time

+ func (c *Cluster) Equals(other *Cluster) bool

+ type ClusterCacheInfo struct

+ APIsCount int64

+ LastCacheSyncTime *metav1.Time

+ ResourcesCount int64

+ func (*ClusterCacheInfo) Descriptor() ([]byte, []int)

+ func (*ClusterCacheInfo) ProtoMessage()

+ func (in *ClusterCacheInfo) DeepCopy() *ClusterCacheInfo

+ func (in *ClusterCacheInfo) DeepCopyInto(out *ClusterCacheInfo)

+ func (m *ClusterCacheInfo) Marshal() (dAtA []byte, err error)

+ func (m *ClusterCacheInfo) MarshalTo(dAtA []byte) (int, error)

+ func (m *ClusterCacheInfo) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *ClusterCacheInfo) Reset()

+ func (m *ClusterCacheInfo) Size() (n int)

+ func (m *ClusterCacheInfo) Unmarshal(dAtA []byte) error

+ func (m *ClusterCacheInfo) XXX_DiscardUnknown()

+ func (m *ClusterCacheInfo) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ClusterCacheInfo) XXX_Merge(src proto.Message)

+ func (m *ClusterCacheInfo) XXX_Size() int

+ func (m *ClusterCacheInfo) XXX_Unmarshal(b []byte) error

+ func (this *ClusterCacheInfo) String() string

+ type ClusterInfo struct

+ ApplicationsCount int64

+ CacheInfo ClusterCacheInfo

+ ConnectionState ConnectionState

+ ServerVersion string

+ func (*ClusterInfo) Descriptor() ([]byte, []int)

+ func (*ClusterInfo) ProtoMessage()

+ func (in *ClusterInfo) DeepCopy() *ClusterInfo

+ func (in *ClusterInfo) DeepCopyInto(out *ClusterInfo)

+ func (m *ClusterInfo) Marshal() (dAtA []byte, err error)

+ func (m *ClusterInfo) MarshalTo(dAtA []byte) (int, error)

+ func (m *ClusterInfo) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *ClusterInfo) Reset()

+ func (m *ClusterInfo) Size() (n int)

+ func (m *ClusterInfo) Unmarshal(dAtA []byte) error

+ func (m *ClusterInfo) XXX_DiscardUnknown()

+ func (m *ClusterInfo) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ClusterInfo) XXX_Merge(src proto.Message)

+ func (m *ClusterInfo) XXX_Size() int

+ func (m *ClusterInfo) XXX_Unmarshal(b []byte) error

+ func (this *ClusterInfo) String() string

+ type GnuPGPublicKey struct

+ Fingerprint string

+ KeyData string

+ KeyID string

+ Owner string

+ SubType string

+ Trust string

+ func (*GnuPGPublicKey) Descriptor() ([]byte, []int)

+ func (*GnuPGPublicKey) ProtoMessage()

+ func (in *GnuPGPublicKey) DeepCopy() *GnuPGPublicKey

+ func (in *GnuPGPublicKey) DeepCopyInto(out *GnuPGPublicKey)

+ func (m *GnuPGPublicKey) Marshal() (dAtA []byte, err error)

+ func (m *GnuPGPublicKey) MarshalTo(dAtA []byte) (int, error)

+ func (m *GnuPGPublicKey) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *GnuPGPublicKey) Reset()

+ func (m *GnuPGPublicKey) Size() (n int)

+ func (m *GnuPGPublicKey) Unmarshal(dAtA []byte) error

+ func (m *GnuPGPublicKey) XXX_DiscardUnknown()

+ func (m *GnuPGPublicKey) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *GnuPGPublicKey) XXX_Merge(src proto.Message)

+ func (m *GnuPGPublicKey) XXX_Size() int

+ func (m *GnuPGPublicKey) XXX_Unmarshal(b []byte) error

+ func (this *GnuPGPublicKey) String() string

+ type GnuPGPublicKeyList struct

+ Items []GnuPGPublicKey

+ func (*GnuPGPublicKeyList) Descriptor() ([]byte, []int)

+ func (*GnuPGPublicKeyList) ProtoMessage()

+ func (in *GnuPGPublicKeyList) DeepCopy() *GnuPGPublicKeyList

+ func (in *GnuPGPublicKeyList) DeepCopyInto(out *GnuPGPublicKeyList)

+ func (m *GnuPGPublicKeyList) Marshal() (dAtA []byte, err error)

+ func (m *GnuPGPublicKeyList) MarshalTo(dAtA []byte) (int, error)

+ func (m *GnuPGPublicKeyList) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *GnuPGPublicKeyList) Reset()

+ func (m *GnuPGPublicKeyList) Size() (n int)

+ func (m *GnuPGPublicKeyList) Unmarshal(dAtA []byte) error

+ func (m *GnuPGPublicKeyList) XXX_DiscardUnknown()

+ func (m *GnuPGPublicKeyList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *GnuPGPublicKeyList) XXX_Merge(src proto.Message)

+ func (m *GnuPGPublicKeyList) XXX_Size() int

+ func (m *GnuPGPublicKeyList) XXX_Unmarshal(b []byte) error

+ func (this *GnuPGPublicKeyList) String() string

+ type JWTTokens struct

+ Items []JWTToken

+ func (*JWTTokens) Descriptor() ([]byte, []int)

+ func (*JWTTokens) ProtoMessage()

+ func (in *JWTTokens) DeepCopy() *JWTTokens

+ func (in *JWTTokens) DeepCopyInto(out *JWTTokens)

+ func (m *JWTTokens) Marshal() (dAtA []byte, err error)

+ func (m *JWTTokens) MarshalTo(dAtA []byte) (int, error)

+ func (m *JWTTokens) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *JWTTokens) Reset()

+ func (m *JWTTokens) Size() (n int)

+ func (m *JWTTokens) Unmarshal(dAtA []byte) error

+ func (m *JWTTokens) XXX_DiscardUnknown()

+ func (m *JWTTokens) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *JWTTokens) XXX_Merge(src proto.Message)

+ func (m *JWTTokens) XXX_Size() int

+ func (m *JWTTokens) XXX_Unmarshal(b []byte) error

+ func (this *JWTTokens) String() string

type Operation

+ Retry RetryStrategy

+ func (o *Operation) DryRun() bool

type OperationState

+ RetryCount int64

+ type OrphanedResourceKey struct

+ Group string

+ Kind string

+ Name string

+ func (*OrphanedResourceKey) Descriptor() ([]byte, []int)

+ func (*OrphanedResourceKey) ProtoMessage()

+ func (in *OrphanedResourceKey) DeepCopy() *OrphanedResourceKey

+ func (in *OrphanedResourceKey) DeepCopyInto(out *OrphanedResourceKey)

+ func (m *OrphanedResourceKey) Marshal() (dAtA []byte, err error)

+ func (m *OrphanedResourceKey) MarshalTo(dAtA []byte) (int, error)

+ func (m *OrphanedResourceKey) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *OrphanedResourceKey) Reset()

+ func (m *OrphanedResourceKey) Size() (n int)

+ func (m *OrphanedResourceKey) Unmarshal(dAtA []byte) error

+ func (m *OrphanedResourceKey) XXX_DiscardUnknown()

+ func (m *OrphanedResourceKey) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *OrphanedResourceKey) XXX_Merge(src proto.Message)

+ func (m *OrphanedResourceKey) XXX_Size() int

+ func (m *OrphanedResourceKey) XXX_Unmarshal(b []byte) error

+ func (this *OrphanedResourceKey) String() string

type OrphanedResourcesMonitorSettings

+ Ignore []OrphanedResourceKey

+ type OverrideIgnoreDiff struct

+ JSONPointers []string

+ func (*OverrideIgnoreDiff) Descriptor() ([]byte, []int)

+ func (*OverrideIgnoreDiff) ProtoMessage()

+ func (in *OverrideIgnoreDiff) DeepCopy() *OverrideIgnoreDiff

+ func (in *OverrideIgnoreDiff) DeepCopyInto(out *OverrideIgnoreDiff)

+ func (m *OverrideIgnoreDiff) Marshal() (dAtA []byte, err error)

+ func (m *OverrideIgnoreDiff) MarshalTo(dAtA []byte) (int, error)

+ func (m *OverrideIgnoreDiff) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *OverrideIgnoreDiff) Reset()

+ func (m *OverrideIgnoreDiff) Size() (n int)

+ func (m *OverrideIgnoreDiff) Unmarshal(dAtA []byte) error

+ func (m *OverrideIgnoreDiff) XXX_DiscardUnknown()

+ func (m *OverrideIgnoreDiff) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *OverrideIgnoreDiff) XXX_Merge(src proto.Message)

+ func (m *OverrideIgnoreDiff) XXX_Size() int

+ func (m *OverrideIgnoreDiff) XXX_Unmarshal(b []byte) error

+ func (this *OverrideIgnoreDiff) String() string

type ResourceNode

+ CreatedAt *metav1.Time

type ResourceOverride

+ func (s *ResourceOverride) UnmarshalJSON(data []byte) error

+ func (s ResourceOverride) MarshalJSON() ([]byte, error)

+ type RetryStrategy struct

+ Backoff *Backoff

+ Limit int64

+ func (*RetryStrategy) Descriptor() ([]byte, []int)

+ func (*RetryStrategy) ProtoMessage()

+ func (in *RetryStrategy) DeepCopy() *RetryStrategy

+ func (in *RetryStrategy) DeepCopyInto(out *RetryStrategy)

+ func (m *RetryStrategy) Marshal() (dAtA []byte, err error)

+ func (m *RetryStrategy) MarshalTo(dAtA []byte) (int, error)

+ func (m *RetryStrategy) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *RetryStrategy) Reset()

+ func (m *RetryStrategy) Size() (n int)

+ func (m *RetryStrategy) Unmarshal(dAtA []byte) error

+ func (m *RetryStrategy) XXX_DiscardUnknown()

+ func (m *RetryStrategy) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *RetryStrategy) XXX_Merge(src proto.Message)

+ func (m *RetryStrategy) XXX_Size() int

+ func (m *RetryStrategy) XXX_Unmarshal(b []byte) error

+ func (r *RetryStrategy) NextRetryAt(lastAttempt time.Time, retryCounts int64) (time.Time, error)

+ func (this *RetryStrategy) String() string

type RevisionHistories

+ func (in RevisionHistories) LastRevisionHistory() RevisionHistory

type RevisionHistory

+ DeployStartedAt *metav1.Time

type RevisionMetadata

+ SignatureInfo string

+ type SignatureKey struct

+ KeyID string

+ func (*SignatureKey) Descriptor() ([]byte, []int)

+ func (*SignatureKey) ProtoMessage()

+ func (in *SignatureKey) DeepCopy() *SignatureKey

+ func (in *SignatureKey) DeepCopyInto(out *SignatureKey)

+ func (m *SignatureKey) Marshal() (dAtA []byte, err error)

+ func (m *SignatureKey) MarshalTo(dAtA []byte) (int, error)

+ func (m *SignatureKey) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *SignatureKey) Reset()

+ func (m *SignatureKey) Size() (n int)

+ func (m *SignatureKey) Unmarshal(dAtA []byte) error

+ func (m *SignatureKey) XXX_DiscardUnknown()

+ func (m *SignatureKey) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *SignatureKey) XXX_Merge(src proto.Message)

+ func (m *SignatureKey) XXX_Size() int

+ func (m *SignatureKey) XXX_Unmarshal(b []byte) error

+ func (this *SignatureKey) String() string

type SyncOperationResource

+ Namespace string

type SyncPolicy

+ Retry *RetryStrategy

Aug 15, 2020 GO-2022-0304 +31 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jul 31, 2020 GO-2022-0304 +31 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jun 19, 2020 GO-2022-0304 +31 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jun 16, 2020 GO-2022-0304 +31 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Changes in this version

type Operation

+ Info []*Info

Jun 9, 2020 GO-2022-0304 +31 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jun 2, 2020 GO-2022-0304 +31 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jun 16, 2020 GO-2022-0304 +31 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jun 9, 2020 GO-2022-0304 +31 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jun 2, 2020 GO-2022-0304 +31 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

May 16, 2020 GO-2022-0304 +31 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

May 5, 2020 GO-2022-0304 +31 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

May 2, 2020 GO-2022-0304 +31 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Changes in this version

type AppProject

+ func (p *AppProject) ValidateJWTTokenID(roleName string, id string) error

type AppProjectSpec

+ NamespaceResourceWhitelist []metav1.GroupKind

type ApplicationSourceKustomize

+ Version string

type JWTToken

+ ID string

+ type KnownTypeField struct

+ Field string

+ Type string

+ func (*KnownTypeField) Descriptor() ([]byte, []int)

+ func (*KnownTypeField) ProtoMessage()

+ func (in *KnownTypeField) DeepCopy() *KnownTypeField

+ func (in *KnownTypeField) DeepCopyInto(out *KnownTypeField)

+ func (m *KnownTypeField) Marshal() (dAtA []byte, err error)

+ func (m *KnownTypeField) MarshalTo(dAtA []byte) (int, error)

+ func (m *KnownTypeField) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *KnownTypeField) Reset()

+ func (m *KnownTypeField) Size() (n int)

+ func (m *KnownTypeField) Unmarshal(dAtA []byte) error

+ func (m *KnownTypeField) XXX_DiscardUnknown()

+ func (m *KnownTypeField) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *KnownTypeField) XXX_Merge(src proto.Message)

+ func (m *KnownTypeField) XXX_Size() int

+ func (m *KnownTypeField) XXX_Unmarshal(b []byte) error

+ func (this *KnownTypeField) String() string

type KustomizeOptions

+ BinaryPath string

type ResourceOverride

+ KnownTypeFields []KnownTypeField

Apr 15, 2020 GO-2022-0304 +31 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Apr 6, 2020 GO-2022-0304 +31 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Apr 2, 2020 GO-2022-0304 +33 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0882: Observable Discrepancy in Argo in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Changes in this version

+ func SetK8SConfigDefaults(config *rest.Config) error

type ApplicationSourceHelm

+ FileParameters []HelmFileParameter

+ func (in *ApplicationSourceHelm) AddFileParameter(p HelmFileParameter)

type Cluster

+ func (c *Cluster) RawRestConfig() *rest.Config

+ type HelmFileParameter struct

+ Name string

+ Path string

+ func NewHelmFileParameter(text string) (*HelmFileParameter, error)

+ func (*HelmFileParameter) Descriptor() ([]byte, []int)

+ func (*HelmFileParameter) ProtoMessage()

+ func (in *HelmFileParameter) DeepCopy() *HelmFileParameter

+ func (in *HelmFileParameter) DeepCopyInto(out *HelmFileParameter)

+ func (m *HelmFileParameter) Marshal() (dAtA []byte, err error)

+ func (m *HelmFileParameter) MarshalTo(dAtA []byte) (int, error)

+ func (m *HelmFileParameter) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *HelmFileParameter) Reset()

+ func (m *HelmFileParameter) Size() (n int)

+ func (m *HelmFileParameter) Unmarshal(dAtA []byte) error

+ func (m *HelmFileParameter) XXX_DiscardUnknown()

+ func (m *HelmFileParameter) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *HelmFileParameter) XXX_Merge(src proto.Message)

+ func (m *HelmFileParameter) XXX_Size() int

+ func (m *HelmFileParameter) XXX_Unmarshal(b []byte) error

+ func (this *HelmFileParameter) String() string

type Operation

+ InitiatedBy OperationInitiator

+ type OperationInitiator struct

+ Automated bool

+ Username string

+ func (*OperationInitiator) Descriptor() ([]byte, []int)

+ func (*OperationInitiator) ProtoMessage()

+ func (in *OperationInitiator) DeepCopy() *OperationInitiator

+ func (in *OperationInitiator) DeepCopyInto(out *OperationInitiator)

+ func (m *OperationInitiator) Marshal() (dAtA []byte, err error)

+ func (m *OperationInitiator) MarshalTo(dAtA []byte) (int, error)

+ func (m *OperationInitiator) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (m *OperationInitiator) Reset()

+ func (m *OperationInitiator) Size() (n int)

+ func (m *OperationInitiator) Unmarshal(dAtA []byte) error

+ func (m *OperationInitiator) XXX_DiscardUnknown()

+ func (m *OperationInitiator) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *OperationInitiator) XXX_Merge(src proto.Message)

+ func (m *OperationInitiator) XXX_Size() int

+ func (m *OperationInitiator) XXX_Unmarshal(b []byte) error

+ func (this *OperationInitiator) String() string

type SyncOperation

+ SyncOptions SyncOptions

+ type SyncOptions []string

+ func (in SyncOptions) DeepCopy() SyncOptions

+ func (in SyncOptions) DeepCopyInto(out *SyncOptions)

+ func (o SyncOptions) AddOption(option string) SyncOptions

+ func (o SyncOptions) HasOption(option string) bool

+ func (o SyncOptions) RemoveOption(option string) SyncOptions

type SyncPolicy

+ SyncOptions SyncOptions

+ func (p *SyncPolicy) IsZero() bool

Mar 30, 2020 GO-2022-0304 +31 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Mar 26, 2020 GO-2022-0304 +31 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Mar 20, 2020 GO-2022-0304 +31 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Apr 15, 2020 GO-2022-0304 +32 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jan 24, 2020 GO-2022-0304 +32 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jan 22, 2020 GO-2022-0304 +32 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jan 18, 2020 GO-2022-0304 +32 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Changes in this version

+ var ErrUnexpectedEndOfGroupGenerated = fmt.Errorf("proto: unexpected end of group")

type AWSAuthConfig

+ func (m *AWSAuthConfig) MarshalToSizedBuffer(dAtA []byte) (int, error)

type AppProject

+ func (m *AppProject) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (proj AppProject) IsGroupKindPermitted(gk schema.GroupKind, namespaced bool) bool

+ func (proj AppProject) IsLiveResourcePermitted(un *unstructured.Unstructured, server string) bool

type AppProjectList

+ func (m *AppProjectList) MarshalToSizedBuffer(dAtA []byte) (int, error)

type AppProjectSpec

+ func (m *AppProjectSpec) MarshalToSizedBuffer(dAtA []byte) (int, error)

type Application

+ func (m *Application) MarshalToSizedBuffer(dAtA []byte) (int, error)

type ApplicationCondition

+ func (m *ApplicationCondition) MarshalToSizedBuffer(dAtA []byte) (int, error)

type ApplicationDestination

+ func (m *ApplicationDestination) MarshalToSizedBuffer(dAtA []byte) (int, error)

type ApplicationList

+ func (m *ApplicationList) MarshalToSizedBuffer(dAtA []byte) (int, error)

type ApplicationSource

+ func (m *ApplicationSource) MarshalToSizedBuffer(dAtA []byte) (int, error)

type ApplicationSourceDirectory

+ func (m *ApplicationSourceDirectory) MarshalToSizedBuffer(dAtA []byte) (int, error)

type ApplicationSourceHelm

+ func (m *ApplicationSourceHelm) MarshalToSizedBuffer(dAtA []byte) (int, error)

type ApplicationSourceJsonnet

+ func (m *ApplicationSourceJsonnet) MarshalToSizedBuffer(dAtA []byte) (int, error)

type ApplicationSourceKsonnet

+ func (m *ApplicationSourceKsonnet) MarshalToSizedBuffer(dAtA []byte) (int, error)

type ApplicationSourceKustomize

+ func (m *ApplicationSourceKustomize) MarshalToSizedBuffer(dAtA []byte) (int, error)

type ApplicationSourcePlugin

+ func (m *ApplicationSourcePlugin) MarshalToSizedBuffer(dAtA []byte) (int, error)

type ApplicationSpec

+ RevisionHistoryLimit *int64

+ func (m *ApplicationSpec) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ func (spec ApplicationSpec) GetRevisionHistoryLimit() int

type ApplicationStatus

+ func (m *ApplicationStatus) MarshalToSizedBuffer(dAtA []byte) (int, error)

type ApplicationSummary

+ func (m *ApplicationSummary) MarshalToSizedBuffer(dAtA []byte) (int, error)

type ApplicationTree

+ func (m *ApplicationTree) MarshalToSizedBuffer(dAtA []byte) (int, error)

type ApplicationWatchEvent

+ func (m *ApplicationWatchEvent) MarshalToSizedBuffer(dAtA []byte) (int, error)

type Cluster

+ Namespaces []string

+ func (m *Cluster) MarshalToSizedBuffer(dAtA []byte) (int, error)

type ClusterConfig

+ func (m *ClusterConfig) MarshalToSizedBuffer(dAtA []byte) (int, error)

type ClusterList

+ func (m *ClusterList) MarshalToSizedBuffer(dAtA []byte) (int, error)

type Command

+ func (m *Command) MarshalToSizedBuffer(dAtA []byte) (int, error)

type ComparedTo

+ func (m *ComparedTo) MarshalToSizedBuffer(dAtA []byte) (int, error)

type ComponentParameter

+ func (m *ComponentParameter) MarshalToSizedBuffer(dAtA []byte) (int, error)

type ConfigManagementPlugin

+ func (m *ConfigManagementPlugin) MarshalToSizedBuffer(dAtA []byte) (int, error)

type ConnectionState

+ func (m *ConnectionState) MarshalToSizedBuffer(dAtA []byte) (int, error)

type EnvEntry

+ func (m *EnvEntry) MarshalToSizedBuffer(dAtA []byte) (int, error)

type HealthStatus

+ func (m *HealthStatus) MarshalToSizedBuffer(dAtA []byte) (int, error)

type HelmParameter

+ func (m *HelmParameter) MarshalToSizedBuffer(dAtA []byte) (int, error)

type Info

+ func (m *Info) MarshalToSizedBuffer(dAtA []byte) (int, error)

type InfoItem

+ func (m *InfoItem) MarshalToSizedBuffer(dAtA []byte) (int, error)

type JWTToken

+ func (m *JWTToken) MarshalToSizedBuffer(dAtA []byte) (int, error)

type JsonnetVar

+ func (m *JsonnetVar) MarshalToSizedBuffer(dAtA []byte) (int, error)

type KsonnetParameter

+ func (m *KsonnetParameter) MarshalToSizedBuffer(dAtA []byte) (int, error)

type KustomizeOptions

+ func (m *KustomizeOptions) MarshalToSizedBuffer(dAtA []byte) (int, error)

type Operation

+ func (m *Operation) MarshalToSizedBuffer(dAtA []byte) (int, error)

type OperationState

+ func (m *OperationState) MarshalToSizedBuffer(dAtA []byte) (int, error)

type OrphanedResourcesMonitorSettings

+ func (m *OrphanedResourcesMonitorSettings) MarshalToSizedBuffer(dAtA []byte) (int, error)

type ProjectRole

+ func (m *ProjectRole) MarshalToSizedBuffer(dAtA []byte) (int, error)

type RepoCreds

+ func (m *RepoCreds) MarshalToSizedBuffer(dAtA []byte) (int, error)

type RepoCredsList

+ func (m *RepoCredsList) MarshalToSizedBuffer(dAtA []byte) (int, error)

type Repository

+ func (m *Repository) MarshalToSizedBuffer(dAtA []byte) (int, error)

type RepositoryCertificate

+ func (m *RepositoryCertificate) MarshalToSizedBuffer(dAtA []byte) (int, error)

type RepositoryCertificateList

+ func (m *RepositoryCertificateList) MarshalToSizedBuffer(dAtA []byte) (int, error)

type RepositoryList

+ func (m *RepositoryList) MarshalToSizedBuffer(dAtA []byte) (int, error)

type ResourceAction

+ func (m *ResourceAction) MarshalToSizedBuffer(dAtA []byte) (int, error)

type ResourceActionDefinition

+ func (m *ResourceActionDefinition) MarshalToSizedBuffer(dAtA []byte) (int, error)

type ResourceActionParam

+ func (m *ResourceActionParam) MarshalToSizedBuffer(dAtA []byte) (int, error)

type ResourceActions

+ func (m *ResourceActions) MarshalToSizedBuffer(dAtA []byte) (int, error)

type ResourceDiff

+ NormalizedLiveState string

+ PredictedLiveState string

+ func (m *ResourceDiff) MarshalToSizedBuffer(dAtA []byte) (int, error)

type ResourceIgnoreDifferences

+ func (m *ResourceIgnoreDifferences) MarshalToSizedBuffer(dAtA []byte) (int, error)

type ResourceNetworkingInfo

+ func (m *ResourceNetworkingInfo) MarshalToSizedBuffer(dAtA []byte) (int, error)

type ResourceNode

+ func (m *ResourceNode) MarshalToSizedBuffer(dAtA []byte) (int, error)

type ResourceOverride

+ func (m *ResourceOverride) MarshalToSizedBuffer(dAtA []byte) (int, error)

type ResourceRef

+ func (m *ResourceRef) MarshalToSizedBuffer(dAtA []byte) (int, error)

type ResourceResult

+ func (m *ResourceResult) MarshalToSizedBuffer(dAtA []byte) (int, error)

type ResourceStatus

+ func (m *ResourceStatus) MarshalToSizedBuffer(dAtA []byte) (int, error)

+ type RevisionHistories []RevisionHistory

+ func (in RevisionHistories) DeepCopy() RevisionHistories

+ func (in RevisionHistories) DeepCopyInto(out *RevisionHistories)

+ func (in RevisionHistories) Trunc(n int) RevisionHistories

type RevisionHistory

+ func (m *RevisionHistory) MarshalToSizedBuffer(dAtA []byte) (int, error)

type RevisionMetadata

+ func (m *RevisionMetadata) MarshalToSizedBuffer(dAtA []byte) (int, error)

type SyncOperation

+ func (m *SyncOperation) MarshalToSizedBuffer(dAtA []byte) (int, error)

type SyncOperationResource

+ func (m *SyncOperationResource) MarshalToSizedBuffer(dAtA []byte) (int, error)

type SyncOperationResult

+ func (m *SyncOperationResult) MarshalToSizedBuffer(dAtA []byte) (int, error)

type SyncPolicy

+ func (m *SyncPolicy) MarshalToSizedBuffer(dAtA []byte) (int, error)

type SyncPolicyAutomated

+ func (m *SyncPolicyAutomated) MarshalToSizedBuffer(dAtA []byte) (int, error)

type SyncStatus

+ func (m *SyncStatus) MarshalToSizedBuffer(dAtA []byte) (int, error)

type SyncStrategy

+ func (m *SyncStrategy) MarshalToSizedBuffer(dAtA []byte) (int, error)

type SyncStrategyApply

+ func (m *SyncStrategyApply) MarshalToSizedBuffer(dAtA []byte) (int, error)

type SyncStrategyHook

+ func (m *SyncStrategyHook) MarshalToSizedBuffer(dAtA []byte) (int, error)

type SyncWindow

+ func (m *SyncWindow) MarshalToSizedBuffer(dAtA []byte) (int, error)

type TLSClientConfig

+ func (m *TLSClientConfig) MarshalToSizedBuffer(dAtA []byte) (int, error)

Jan 13, 2020 GO-2022-0304 +32 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Dec 10, 2019 GO-2022-0304 +32 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Dec 9, 2019 GO-2022-0304 +32 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Dec 5, 2019 GO-2022-0304 +32 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Dec 5, 2019 GO-2022-0304 +32 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Dec 3, 2019 GO-2022-0304 +32 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Dec 2, 2019 GO-2022-0304 +32 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Nov 13, 2019 GO-2022-0304 +32 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Nov 11, 2019 GO-2022-0304 +30 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Nov 4, 2019 GO-2022-0304 +30 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Oct 29, 2019 GO-2022-0304 +30 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Oct 23, 2019 GO-2022-0304 +30 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Oct 16, 2019 GO-2022-0304 +30 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Oct 29, 2019 GO-2022-0304 +30 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Oct 22, 2019 GO-2022-0304 +30 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Changes in this version

+ const ApplicationConditionOrphanedResourceWarning

type AppProjectSpec

+ OrphanedResources *OrphanedResourcesMonitorSettings

+ SyncWindows SyncWindows

+ func (s *AppProjectSpec) AddWindow(knd string, sch string, dur string, app []string, ns []string, cl []string, ...) error

+ func (s *AppProjectSpec) DeleteWindow(id int) error

type ApplicationCondition

+ LastTransitionTime *metav1.Time

type ApplicationSource

+ Chart string

+ func (a *ApplicationSource) IsHelm() bool

type ApplicationSourceHelm

+ Values string

+ func (in *ApplicationSourceHelm) AddParameter(p HelmParameter)

type ApplicationSourceKustomize

+ NameSuffix string

type ApplicationStatus

+ func (status *ApplicationStatus) GetConditions(conditionTypes map[ApplicationConditionType]bool) []ApplicationCondition

+ func (status *ApplicationStatus) SetConditions(conditions []ApplicationCondition, ...)

type ApplicationTree

+ OrphanedNodes []ResourceNode

type Cluster

+ ServerVersion string

type Env

+ func (e Env) Envsubst(s string) string

type HelmParameter

+ func NewHelmParameter(text string, forceString bool) (*HelmParameter, error)

type HookDeletePolicy

+ const HookDeletePolicyBeforeHookCreation

+ func NewHookDeletePolicy(p string) (HookDeletePolicy, bool)

type HookType

+ func NewHookType(t string) (HookType, bool)

type JsonnetVar

+ func NewJsonnetVar(s string, code bool) JsonnetVar

type OperationPhase

+ func (os OperationPhase) Failed() bool

+ func (os OperationPhase) Running() bool

+ type OrphanedResourcesMonitorSettings struct

+ Warn *bool

+ func (*OrphanedResourcesMonitorSettings) Descriptor() ([]byte, []int)

+ func (*OrphanedResourcesMonitorSettings) ProtoMessage()

+ func (dst *OrphanedResourcesMonitorSettings) XXX_Merge(src proto.Message)

+ func (in *OrphanedResourcesMonitorSettings) DeepCopy() *OrphanedResourcesMonitorSettings

+ func (in *OrphanedResourcesMonitorSettings) DeepCopyInto(out *OrphanedResourcesMonitorSettings)

+ func (m *OrphanedResourcesMonitorSettings) Marshal() (dAtA []byte, err error)

+ func (m *OrphanedResourcesMonitorSettings) MarshalTo(dAtA []byte) (int, error)

+ func (m *OrphanedResourcesMonitorSettings) Reset()

+ func (m *OrphanedResourcesMonitorSettings) Size() (n int)

+ func (m *OrphanedResourcesMonitorSettings) Unmarshal(dAtA []byte) error

+ func (m *OrphanedResourcesMonitorSettings) XXX_DiscardUnknown()

+ func (m *OrphanedResourcesMonitorSettings) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *OrphanedResourcesMonitorSettings) XXX_Size() int

+ func (m *OrphanedResourcesMonitorSettings) XXX_Unmarshal(b []byte) error

+ func (s *OrphanedResourcesMonitorSettings) IsWarn() bool

+ func (this *OrphanedResourcesMonitorSettings) String() string

+ type RepoCreds struct

+ Password string

+ SSHPrivateKey string

+ TLSClientCertData string

+ TLSClientCertKey string

+ URL string

+ Username string

+ func (*RepoCreds) Descriptor() ([]byte, []int)

+ func (*RepoCreds) ProtoMessage()

+ func (dst *RepoCreds) XXX_Merge(src proto.Message)

+ func (in *RepoCreds) DeepCopy() *RepoCreds

+ func (in *RepoCreds) DeepCopyInto(out *RepoCreds)

+ func (m *RepoCreds) Marshal() (dAtA []byte, err error)

+ func (m *RepoCreds) MarshalTo(dAtA []byte) (int, error)

+ func (m *RepoCreds) Reset()

+ func (m *RepoCreds) Size() (n int)

+ func (m *RepoCreds) Unmarshal(dAtA []byte) error

+ func (m *RepoCreds) XXX_DiscardUnknown()

+ func (m *RepoCreds) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *RepoCreds) XXX_Size() int

+ func (m *RepoCreds) XXX_Unmarshal(b []byte) error

+ func (this *RepoCreds) String() string

+ type RepoCredsList struct

+ Items []RepoCreds

+ func (*RepoCredsList) Descriptor() ([]byte, []int)

+ func (*RepoCredsList) ProtoMessage()

+ func (dst *RepoCredsList) XXX_Merge(src proto.Message)

+ func (in *RepoCredsList) DeepCopy() *RepoCredsList

+ func (in *RepoCredsList) DeepCopyInto(out *RepoCredsList)

+ func (m *RepoCredsList) Marshal() (dAtA []byte, err error)

+ func (m *RepoCredsList) MarshalTo(dAtA []byte) (int, error)

+ func (m *RepoCredsList) Reset()

+ func (m *RepoCredsList) Size() (n int)

+ func (m *RepoCredsList) Unmarshal(dAtA []byte) error

+ func (m *RepoCredsList) XXX_DiscardUnknown()

+ func (m *RepoCredsList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *RepoCredsList) XXX_Size() int

+ func (m *RepoCredsList) XXX_Unmarshal(b []byte) error

+ func (this *RepoCredsList) String() string

+ type Repositories []*Repository

+ func (in Repositories) DeepCopy() Repositories

+ func (in Repositories) DeepCopyInto(out *Repositories)

+ func (r Repositories) Filter(predicate func(r *Repository) bool) Repositories

type Repository

+ InheritedCreds bool

+ Name string

+ Type string

+ func (m *Repository) CopySettingsFrom(source *Repository)

+ func (repo *Repository) CopyCredentialsFromRepo(source *Repository)

+ func (repo *Repository) GetGitCreds() git.Creds

+ func (repo *Repository) GetHelmCreds() helm.Creds

type ResourceAction

+ Disabled bool

+ type SyncWindow struct

+ Applications []string

+ Clusters []string

+ Duration string

+ Kind string

+ ManualSync bool

+ Namespaces []string

+ Schedule string

+ func (*SyncWindow) Descriptor() ([]byte, []int)

+ func (*SyncWindow) ProtoMessage()

+ func (dst *SyncWindow) XXX_Merge(src proto.Message)

+ func (in *SyncWindow) DeepCopy() *SyncWindow

+ func (in *SyncWindow) DeepCopyInto(out *SyncWindow)

+ func (m *SyncWindow) Marshal() (dAtA []byte, err error)

+ func (m *SyncWindow) MarshalTo(dAtA []byte) (int, error)

+ func (m *SyncWindow) Reset()

+ func (m *SyncWindow) Size() (n int)

+ func (m *SyncWindow) Unmarshal(dAtA []byte) error

+ func (m *SyncWindow) XXX_DiscardUnknown()

+ func (m *SyncWindow) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *SyncWindow) XXX_Size() int

+ func (m *SyncWindow) XXX_Unmarshal(b []byte) error

+ func (this *SyncWindow) String() string

+ func (w *SyncWindow) Update(s string, d string, a []string, n []string, c []string) error

+ func (w *SyncWindow) Validate() error

+ func (w SyncWindow) Active() bool

+ type SyncWindows []*SyncWindow

+ func (in SyncWindows) DeepCopy() SyncWindows

+ func (in SyncWindows) DeepCopyInto(out *SyncWindows)

+ func (s *SyncWindows) Active() *SyncWindows

+ func (s *SyncWindows) HasWindows() bool

+ func (s *SyncWindows) InactiveAllows() *SyncWindows

+ func (w *SyncWindows) CanSync(isManual bool) bool

+ func (w *SyncWindows) Matches(app *Application) *SyncWindows

Oct 1, 2019 GO-2022-0304 +30 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Sep 24, 2019 GO-2022-0304 +30 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Sep 12, 2019 GO-2022-0304 +30 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Sep 4, 2019 GO-2022-0304 +30 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Changes in this version

+ const ApplicationConditionExcludedResourceWarning

+ const SyncPhaseSyncFail

type AppProject

+ func (p *AppProject) AddGroupToRole(roleName, group string) (bool, error)

+ func (p *AppProject) GetJWTToken(roleName string, issuedAt int64) (*JWTToken, int, error)

+ func (p *AppProject) GetRoleByName(name string) (*ProjectRole, int, error)

+ func (p *AppProject) NormalizePolicies()

+ func (p *AppProject) RemoveGroupFromRole(roleName, group string) (bool, error)

+ func (p *AppProject) ValidateProject() error

type ApplicationSourceKustomize

+ func (k *ApplicationSourceKustomize) MergeImage(image KustomizeImage)

+ type Env []*EnvEntry

+ func (e Env) Environ() []string

+ func (e Env) IsZero() bool

+ func (in Env) DeepCopy() Env

+ func (in Env) DeepCopyInto(out *Env)

+ type EnvEntry struct

+ Name string

+ Value string

+ func (*EnvEntry) Descriptor() ([]byte, []int)

+ func (*EnvEntry) ProtoMessage()

+ func (a *EnvEntry) IsZero() bool

+ func (dst *EnvEntry) XXX_Merge(src proto.Message)

+ func (in *EnvEntry) DeepCopy() *EnvEntry

+ func (in *EnvEntry) DeepCopyInto(out *EnvEntry)

+ func (m *EnvEntry) Marshal() (dAtA []byte, err error)

+ func (m *EnvEntry) MarshalTo(dAtA []byte) (int, error)

+ func (m *EnvEntry) Reset()

+ func (m *EnvEntry) Size() (n int)

+ func (m *EnvEntry) Unmarshal(dAtA []byte) error

+ func (m *EnvEntry) XXX_DiscardUnknown()

+ func (m *EnvEntry) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *EnvEntry) XXX_Size() int

+ func (m *EnvEntry) XXX_Unmarshal(b []byte) error

+ func (this *EnvEntry) String() string

type HelmParameter

+ ForceString bool

type HookType

+ const HookTypeSyncFail

+ type KustomizeImage string

+ func (i KustomizeImage) Match(j KustomizeImage) bool

+ type KustomizeImages []KustomizeImage

+ func (images KustomizeImages) Find(image KustomizeImage) int

+ func (in KustomizeImages) DeepCopy() KustomizeImages

+ func (in KustomizeImages) DeepCopyInto(out *KustomizeImages)

+ type KustomizeOptions struct

+ BuildOptions string

+ func (*KustomizeOptions) Descriptor() ([]byte, []int)

+ func (*KustomizeOptions) ProtoMessage()

+ func (dst *KustomizeOptions) XXX_Merge(src proto.Message)

+ func (in *KustomizeOptions) DeepCopy() *KustomizeOptions

+ func (in *KustomizeOptions) DeepCopyInto(out *KustomizeOptions)

+ func (m *KustomizeOptions) Marshal() (dAtA []byte, err error)

+ func (m *KustomizeOptions) MarshalTo(dAtA []byte) (int, error)

+ func (m *KustomizeOptions) Reset()

+ func (m *KustomizeOptions) Size() (n int)

+ func (m *KustomizeOptions) Unmarshal(dAtA []byte) error

+ func (m *KustomizeOptions) XXX_DiscardUnknown()

+ func (m *KustomizeOptions) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *KustomizeOptions) XXX_Size() int

+ func (m *KustomizeOptions) XXX_Unmarshal(b []byte) error

+ func (this *KustomizeOptions) String() string

type Repository

+ EnableLFS bool

+ Insecure bool

+ TLSClientCertData string

+ TLSClientCertKey string

+ func (repo *Repository) IsInsecure() bool

+ func (repo *Repository) IsLFSEnabled() bool

+ type RepositoryCertificate struct

+ CertData []byte

+ CertInfo string

+ CertSubType string

+ CertType string

+ ServerName string

+ func (*RepositoryCertificate) Descriptor() ([]byte, []int)

+ func (*RepositoryCertificate) ProtoMessage()

+ func (dst *RepositoryCertificate) XXX_Merge(src proto.Message)

+ func (in *RepositoryCertificate) DeepCopy() *RepositoryCertificate

+ func (in *RepositoryCertificate) DeepCopyInto(out *RepositoryCertificate)

+ func (m *RepositoryCertificate) Marshal() (dAtA []byte, err error)

+ func (m *RepositoryCertificate) MarshalTo(dAtA []byte) (int, error)

+ func (m *RepositoryCertificate) Reset()

+ func (m *RepositoryCertificate) Size() (n int)

+ func (m *RepositoryCertificate) Unmarshal(dAtA []byte) error

+ func (m *RepositoryCertificate) XXX_DiscardUnknown()

+ func (m *RepositoryCertificate) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *RepositoryCertificate) XXX_Size() int

+ func (m *RepositoryCertificate) XXX_Unmarshal(b []byte) error

+ func (this *RepositoryCertificate) String() string

+ type RepositoryCertificateList struct

+ Items []RepositoryCertificate

+ func (*RepositoryCertificateList) Descriptor() ([]byte, []int)

+ func (*RepositoryCertificateList) ProtoMessage()

+ func (dst *RepositoryCertificateList) XXX_Merge(src proto.Message)

+ func (in *RepositoryCertificateList) DeepCopy() *RepositoryCertificateList

+ func (in *RepositoryCertificateList) DeepCopyInto(out *RepositoryCertificateList)

+ func (m *RepositoryCertificateList) Marshal() (dAtA []byte, err error)

+ func (m *RepositoryCertificateList) MarshalTo(dAtA []byte) (int, error)

+ func (m *RepositoryCertificateList) Reset()

+ func (m *RepositoryCertificateList) Size() (n int)

+ func (m *RepositoryCertificateList) Unmarshal(dAtA []byte) error

+ func (m *RepositoryCertificateList) XXX_DiscardUnknown()

+ func (m *RepositoryCertificateList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *RepositoryCertificateList) XXX_Size() int

+ func (m *RepositoryCertificateList) XXX_Unmarshal(b []byte) error

+ func (this *RepositoryCertificateList) String() string

type ResourceDiff

+ Hook bool

type ResourceStatus

+ RequiresPruning bool

+ type RevisionMetadata struct

+ Author string

+ Date metav1.Time

+ Message string

+ Tags []string

+ func (*RevisionMetadata) Descriptor() ([]byte, []int)

+ func (*RevisionMetadata) ProtoMessage()

+ func (dst *RevisionMetadata) XXX_Merge(src proto.Message)

+ func (in *RevisionMetadata) DeepCopy() *RevisionMetadata

+ func (in *RevisionMetadata) DeepCopyInto(out *RevisionMetadata)

+ func (m *RevisionMetadata) Marshal() (dAtA []byte, err error)

+ func (m *RevisionMetadata) MarshalTo(dAtA []byte) (int, error)

+ func (m *RevisionMetadata) Reset()

+ func (m *RevisionMetadata) Size() (n int)

+ func (m *RevisionMetadata) Unmarshal(dAtA []byte) error

+ func (m *RevisionMetadata) XXX_DiscardUnknown()

+ func (m *RevisionMetadata) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *RevisionMetadata) XXX_Size() int

+ func (m *RevisionMetadata) XXX_Unmarshal(b []byte) error

+ func (this *RevisionMetadata) String() string

type SyncPolicyAutomated

+ SelfHeal bool

Aug 21, 2019 GO-2022-0304 +30 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Aug 6, 2019 GO-2022-0304 +30 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jul 30, 2019 GO-2022-0304 +29 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jul 24, 2019 GO-2022-0304 +29 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jul 22, 2019 GO-2022-0304 +29 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Changes in this version

+ const SyncPhasePostSync

+ const SyncPhasePreSync

+ const SyncPhaseSync

type ApplicationSourceHelm

+ ReleaseName string

type ApplicationSourceKustomize

+ CommonLabels map[string]string

type ApplicationSpec

+ Info []Info

+ type Info struct

+ Name string

+ Value string

+ func (*Info) Descriptor() ([]byte, []int)

+ func (*Info) ProtoMessage()

+ func (dst *Info) XXX_Merge(src proto.Message)

+ func (in *Info) DeepCopy() *Info

+ func (in *Info) DeepCopyInto(out *Info)

+ func (m *Info) Marshal() (dAtA []byte, err error)

+ func (m *Info) MarshalTo(dAtA []byte) (int, error)

+ func (m *Info) Reset()

+ func (m *Info) Size() (n int)

+ func (m *Info) Unmarshal(dAtA []byte) error

+ func (m *Info) XXX_DiscardUnknown()

+ func (m *Info) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *Info) XXX_Size() int

+ func (m *Info) XXX_Unmarshal(b []byte) error

+ func (this *Info) String() string

type ResourceRef

+ UID string

type ResourceResult

+ SyncPhase SyncPhase

+ type ResourceResults []*ResourceResult

+ func (in ResourceResults) DeepCopy() ResourceResults

+ func (in ResourceResults) DeepCopyInto(out *ResourceResults)

+ func (r ResourceResults) Filter(predicate func(r *ResourceResult) bool) ResourceResults

+ func (r ResourceResults) Find(group string, kind string, namespace string, name string, phase SyncPhase) (int, *ResourceResult)

+ func (r ResourceResults) PruningRequired() (num int)

type SyncOperation

+ Manifests []string

+ func (o *SyncOperation) IsApplyStrategy() bool

+ type SyncPhase = string

type SyncStrategy

+ func (m *SyncStrategy) Force() bool

Jul 19, 2019 GO-2022-0304 +29 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jul 17, 2019 GO-2022-0304 +29 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jul 16, 2019 GO-2022-0304 +29 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jul 9, 2019 GO-2022-0304 +29 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jul 3, 2019 GO-2022-0304 +29 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jun 28, 2019 GO-2022-0304 +29 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jun 21, 2019 GO-2022-0304 +29 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jun 14, 2019 GO-2022-0304 +29 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jun 14, 2019 GO-2022-0304 +29 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

May 28, 2019 GO-2022-0304 +29 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

May 16, 2019 GO-2022-0304 +29 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Changes in this version

+ func GetOpenAPIDefinitions(ref common.ReferenceCallback) map[string]common.OpenAPIDefinition

type AppProjectSpec

+ func (d AppProjectSpec) DestinationClusters() []string

type ApplicationStatus

+ Summary ApplicationSummary

+ type ApplicationSummary struct

+ ExternalURLs []string

+ Images []string

+ func (*ApplicationSummary) Descriptor() ([]byte, []int)

+ func (*ApplicationSummary) ProtoMessage()

+ func (dst *ApplicationSummary) XXX_Merge(src proto.Message)

+ func (in *ApplicationSummary) DeepCopy() *ApplicationSummary

+ func (in *ApplicationSummary) DeepCopyInto(out *ApplicationSummary)

+ func (m *ApplicationSummary) Marshal() (dAtA []byte, err error)

+ func (m *ApplicationSummary) MarshalTo(dAtA []byte) (int, error)

+ func (m *ApplicationSummary) Reset()

+ func (m *ApplicationSummary) Size() (n int)

+ func (m *ApplicationSummary) Unmarshal(dAtA []byte) error

+ func (m *ApplicationSummary) XXX_DiscardUnknown()

+ func (m *ApplicationSummary) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ApplicationSummary) XXX_Size() int

+ func (m *ApplicationSummary) XXX_Unmarshal(b []byte) error

+ func (this *ApplicationSummary) String() string

+ type ApplicationTree struct

+ Nodes []ResourceNode

+ func (*ApplicationTree) Descriptor() ([]byte, []int)

+ func (*ApplicationTree) ProtoMessage()

+ func (dst *ApplicationTree) XXX_Merge(src proto.Message)

+ func (in *ApplicationTree) DeepCopy() *ApplicationTree

+ func (in *ApplicationTree) DeepCopyInto(out *ApplicationTree)

+ func (m *ApplicationTree) Marshal() (dAtA []byte, err error)

+ func (m *ApplicationTree) MarshalTo(dAtA []byte) (int, error)

+ func (m *ApplicationTree) Reset()

+ func (m *ApplicationTree) Size() (n int)

+ func (m *ApplicationTree) Unmarshal(dAtA []byte) error

+ func (m *ApplicationTree) XXX_DiscardUnknown()

+ func (m *ApplicationTree) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ApplicationTree) XXX_Size() int

+ func (m *ApplicationTree) XXX_Unmarshal(b []byte) error

+ func (t *ApplicationTree) FindNode(group string, kind string, namespace string, name string) *ResourceNode

+ func (t *ApplicationTree) GetSummary() ApplicationSummary

+ func (this *ApplicationTree) String() string

type Repository

+ func (m *Repository) CopyCredentialsFrom(source Repository)

+ func (m *Repository) HasCredentials() bool

+ type ResourceAction struct

+ Name string

+ Params []ResourceActionParam

+ func (*ResourceAction) Descriptor() ([]byte, []int)

+ func (*ResourceAction) ProtoMessage()

+ func (dst *ResourceAction) XXX_Merge(src proto.Message)

+ func (in *ResourceAction) DeepCopy() *ResourceAction

+ func (in *ResourceAction) DeepCopyInto(out *ResourceAction)

+ func (m *ResourceAction) Marshal() (dAtA []byte, err error)

+ func (m *ResourceAction) MarshalTo(dAtA []byte) (int, error)

+ func (m *ResourceAction) Reset()

+ func (m *ResourceAction) Size() (n int)

+ func (m *ResourceAction) Unmarshal(dAtA []byte) error

+ func (m *ResourceAction) XXX_DiscardUnknown()

+ func (m *ResourceAction) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ResourceAction) XXX_Size() int

+ func (m *ResourceAction) XXX_Unmarshal(b []byte) error

+ func (this *ResourceAction) String() string

+ type ResourceActionDefinition struct

+ ActionLua string

+ Name string

+ func (*ResourceActionDefinition) Descriptor() ([]byte, []int)

+ func (*ResourceActionDefinition) ProtoMessage()

+ func (dst *ResourceActionDefinition) XXX_Merge(src proto.Message)

+ func (in *ResourceActionDefinition) DeepCopy() *ResourceActionDefinition

+ func (in *ResourceActionDefinition) DeepCopyInto(out *ResourceActionDefinition)

+ func (m *ResourceActionDefinition) Marshal() (dAtA []byte, err error)

+ func (m *ResourceActionDefinition) MarshalTo(dAtA []byte) (int, error)

+ func (m *ResourceActionDefinition) Reset()

+ func (m *ResourceActionDefinition) Size() (n int)

+ func (m *ResourceActionDefinition) Unmarshal(dAtA []byte) error

+ func (m *ResourceActionDefinition) XXX_DiscardUnknown()

+ func (m *ResourceActionDefinition) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ResourceActionDefinition) XXX_Size() int

+ func (m *ResourceActionDefinition) XXX_Unmarshal(b []byte) error

+ func (this *ResourceActionDefinition) String() string

+ type ResourceActionParam struct

+ Default string

+ Name string

+ Type string

+ Value string

+ func (*ResourceActionParam) Descriptor() ([]byte, []int)

+ func (*ResourceActionParam) ProtoMessage()

+ func (dst *ResourceActionParam) XXX_Merge(src proto.Message)

+ func (in *ResourceActionParam) DeepCopy() *ResourceActionParam

+ func (in *ResourceActionParam) DeepCopyInto(out *ResourceActionParam)

+ func (m *ResourceActionParam) Marshal() (dAtA []byte, err error)

+ func (m *ResourceActionParam) MarshalTo(dAtA []byte) (int, error)

+ func (m *ResourceActionParam) Reset()

+ func (m *ResourceActionParam) Size() (n int)

+ func (m *ResourceActionParam) Unmarshal(dAtA []byte) error

+ func (m *ResourceActionParam) XXX_DiscardUnknown()

+ func (m *ResourceActionParam) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ResourceActionParam) XXX_Size() int

+ func (m *ResourceActionParam) XXX_Unmarshal(b []byte) error

+ func (this *ResourceActionParam) String() string

+ type ResourceActions struct

+ ActionDiscoveryLua string

+ Definitions []ResourceActionDefinition

+ func (*ResourceActions) Descriptor() ([]byte, []int)

+ func (*ResourceActions) ProtoMessage()

+ func (dst *ResourceActions) XXX_Merge(src proto.Message)

+ func (in *ResourceActions) DeepCopy() *ResourceActions

+ func (in *ResourceActions) DeepCopyInto(out *ResourceActions)

+ func (m *ResourceActions) Marshal() (dAtA []byte, err error)

+ func (m *ResourceActions) MarshalTo(dAtA []byte) (int, error)

+ func (m *ResourceActions) Reset()

+ func (m *ResourceActions) Size() (n int)

+ func (m *ResourceActions) Unmarshal(dAtA []byte) error

+ func (m *ResourceActions) XXX_DiscardUnknown()

+ func (m *ResourceActions) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ResourceActions) XXX_Size() int

+ func (m *ResourceActions) XXX_Unmarshal(b []byte) error

+ func (this *ResourceActions) String() string

+ type ResourceNetworkingInfo struct

+ ExternalURLs []string

+ Ingress []v1.LoadBalancerIngress

+ Labels map[string]string

+ TargetLabels map[string]string

+ TargetRefs []ResourceRef

+ func (*ResourceNetworkingInfo) Descriptor() ([]byte, []int)

+ func (*ResourceNetworkingInfo) ProtoMessage()

+ func (dst *ResourceNetworkingInfo) XXX_Merge(src proto.Message)

+ func (in *ResourceNetworkingInfo) DeepCopy() *ResourceNetworkingInfo

+ func (in *ResourceNetworkingInfo) DeepCopyInto(out *ResourceNetworkingInfo)

+ func (m *ResourceNetworkingInfo) Marshal() (dAtA []byte, err error)

+ func (m *ResourceNetworkingInfo) MarshalTo(dAtA []byte) (int, error)

+ func (m *ResourceNetworkingInfo) Reset()

+ func (m *ResourceNetworkingInfo) Size() (n int)

+ func (m *ResourceNetworkingInfo) Unmarshal(dAtA []byte) error

+ func (m *ResourceNetworkingInfo) XXX_DiscardUnknown()

+ func (m *ResourceNetworkingInfo) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ResourceNetworkingInfo) XXX_Size() int

+ func (m *ResourceNetworkingInfo) XXX_Unmarshal(b []byte) error

+ func (this *ResourceNetworkingInfo) String() string

type ResourceNode

+ Health *HealthStatus

+ Images []string

+ NetworkingInfo *ResourceNetworkingInfo

+ ParentRefs []ResourceRef

type ResourceOverride

+ Actions string

+ func (o *ResourceOverride) GetActions() (ResourceActions, error)

+ type ResourceRef struct

+ Group string

+ Kind string

+ Name string

+ Namespace string

+ Version string

+ func (*ResourceRef) Descriptor() ([]byte, []int)

+ func (*ResourceRef) ProtoMessage()

+ func (dst *ResourceRef) XXX_Merge(src proto.Message)

+ func (in *ResourceRef) DeepCopy() *ResourceRef

+ func (in *ResourceRef) DeepCopyInto(out *ResourceRef)

+ func (m *ResourceRef) Marshal() (dAtA []byte, err error)

+ func (m *ResourceRef) MarshalTo(dAtA []byte) (int, error)

+ func (m *ResourceRef) Reset()

+ func (m *ResourceRef) Size() (n int)

+ func (m *ResourceRef) Unmarshal(dAtA []byte) error

+ func (m *ResourceRef) XXX_DiscardUnknown()

+ func (m *ResourceRef) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ResourceRef) XXX_Size() int

+ func (m *ResourceRef) XXX_Unmarshal(b []byte) error

+ func (this *ResourceRef) String() string

May 9, 2019 GO-2022-0304 +26 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Apr 30, 2019 GO-2022-0304 +26 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Apr 24, 2019 GO-2022-0304 +26 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Apr 30, 2019 GO-2022-0304 +26 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Apr 22, 2019 GO-2022-0304 +26 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Apr 9, 2019 GO-2022-0304 +26 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Changes in this version

type ApplicationSourceKustomize

+ Images []string

+ type ResourceOverride struct

+ HealthLua string

+ IgnoreDifferences string

+ func (*ResourceOverride) Descriptor() ([]byte, []int)

+ func (*ResourceOverride) ProtoMessage()

+ func (dst *ResourceOverride) XXX_Merge(src proto.Message)

+ func (in *ResourceOverride) DeepCopy() *ResourceOverride

+ func (in *ResourceOverride) DeepCopyInto(out *ResourceOverride)

+ func (m *ResourceOverride) Marshal() (dAtA []byte, err error)

+ func (m *ResourceOverride) MarshalTo(dAtA []byte) (int, error)

+ func (m *ResourceOverride) Reset()

+ func (m *ResourceOverride) Size() (n int)

+ func (m *ResourceOverride) Unmarshal(dAtA []byte) error

+ func (m *ResourceOverride) XXX_DiscardUnknown()

+ func (m *ResourceOverride) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ResourceOverride) XXX_Size() int

+ func (m *ResourceOverride) XXX_Unmarshal(b []byte) error

+ func (this *ResourceOverride) String() string

Mar 22, 2019 GO-2022-0304 +26 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Changes in this version

+ const ApplicationConditionRepeatedResourceWarning

type ApplicationSource

+ Directory *ApplicationSourceDirectory

+ Plugin *ApplicationSourcePlugin

+ func (a ApplicationSource) IsZero() bool

+ func (source *ApplicationSource) ExplicitType() (*ApplicationSourceType, error)

+ type ApplicationSourceDirectory struct

+ Jsonnet ApplicationSourceJsonnet

+ Recurse bool

+ func (*ApplicationSourceDirectory) Descriptor() ([]byte, []int)

+ func (*ApplicationSourceDirectory) ProtoMessage()

+ func (d *ApplicationSourceDirectory) IsZero() bool

+ func (dst *ApplicationSourceDirectory) XXX_Merge(src proto.Message)

+ func (in *ApplicationSourceDirectory) DeepCopy() *ApplicationSourceDirectory

+ func (in *ApplicationSourceDirectory) DeepCopyInto(out *ApplicationSourceDirectory)

+ func (m *ApplicationSourceDirectory) Marshal() (dAtA []byte, err error)

+ func (m *ApplicationSourceDirectory) MarshalTo(dAtA []byte) (int, error)

+ func (m *ApplicationSourceDirectory) Reset()

+ func (m *ApplicationSourceDirectory) Size() (n int)

+ func (m *ApplicationSourceDirectory) Unmarshal(dAtA []byte) error

+ func (m *ApplicationSourceDirectory) XXX_DiscardUnknown()

+ func (m *ApplicationSourceDirectory) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ApplicationSourceDirectory) XXX_Size() int

+ func (m *ApplicationSourceDirectory) XXX_Unmarshal(b []byte) error

+ func (this *ApplicationSourceDirectory) String() string

type ApplicationSourceHelm

+ Parameters []HelmParameter

+ type ApplicationSourceJsonnet struct

+ ExtVars []JsonnetVar

+ TLAs []JsonnetVar

+ func (*ApplicationSourceJsonnet) Descriptor() ([]byte, []int)

+ func (*ApplicationSourceJsonnet) ProtoMessage()

+ func (dst *ApplicationSourceJsonnet) XXX_Merge(src proto.Message)

+ func (in *ApplicationSourceJsonnet) DeepCopy() *ApplicationSourceJsonnet

+ func (in *ApplicationSourceJsonnet) DeepCopyInto(out *ApplicationSourceJsonnet)

+ func (j *ApplicationSourceJsonnet) IsZero() bool

+ func (m *ApplicationSourceJsonnet) Marshal() (dAtA []byte, err error)

+ func (m *ApplicationSourceJsonnet) MarshalTo(dAtA []byte) (int, error)

+ func (m *ApplicationSourceJsonnet) Reset()

+ func (m *ApplicationSourceJsonnet) Size() (n int)

+ func (m *ApplicationSourceJsonnet) Unmarshal(dAtA []byte) error

+ func (m *ApplicationSourceJsonnet) XXX_DiscardUnknown()

+ func (m *ApplicationSourceJsonnet) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ApplicationSourceJsonnet) XXX_Size() int

+ func (m *ApplicationSourceJsonnet) XXX_Unmarshal(b []byte) error

+ func (this *ApplicationSourceJsonnet) String() string

type ApplicationSourceKsonnet

+ Parameters []KsonnetParameter

type ApplicationSourceKustomize

+ ImageTags []KustomizeImageTag

+ type ApplicationSourcePlugin struct

+ Name string

+ func (*ApplicationSourcePlugin) Descriptor() ([]byte, []int)

+ func (*ApplicationSourcePlugin) ProtoMessage()

+ func (c *ApplicationSourcePlugin) IsZero() bool

+ func (dst *ApplicationSourcePlugin) XXX_Merge(src proto.Message)

+ func (in *ApplicationSourcePlugin) DeepCopy() *ApplicationSourcePlugin

+ func (in *ApplicationSourcePlugin) DeepCopyInto(out *ApplicationSourcePlugin)

+ func (m *ApplicationSourcePlugin) Marshal() (dAtA []byte, err error)

+ func (m *ApplicationSourcePlugin) MarshalTo(dAtA []byte) (int, error)

+ func (m *ApplicationSourcePlugin) Reset()

+ func (m *ApplicationSourcePlugin) Size() (n int)

+ func (m *ApplicationSourcePlugin) Unmarshal(dAtA []byte) error

+ func (m *ApplicationSourcePlugin) XXX_DiscardUnknown()

+ func (m *ApplicationSourcePlugin) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ApplicationSourcePlugin) XXX_Size() int

+ func (m *ApplicationSourcePlugin) XXX_Unmarshal(b []byte) error

+ func (this *ApplicationSourcePlugin) String() string

type ApplicationSourceType

+ const ApplicationSourceTypePlugin

type ApplicationSpec

+ IgnoreDifferences []ResourceIgnoreDifferences

type ApplicationStatus

+ ReconciledAt metav1.Time

+ SourceType ApplicationSourceType

+ type Command struct

+ Args []string

+ Command []string

+ func (*Command) Descriptor() ([]byte, []int)

+ func (*Command) ProtoMessage()

+ func (dst *Command) XXX_Merge(src proto.Message)

+ func (in *Command) DeepCopy() *Command

+ func (in *Command) DeepCopyInto(out *Command)

+ func (m *Command) Marshal() (dAtA []byte, err error)

+ func (m *Command) MarshalTo(dAtA []byte) (int, error)

+ func (m *Command) Reset()

+ func (m *Command) Size() (n int)

+ func (m *Command) Unmarshal(dAtA []byte) error

+ func (m *Command) XXX_DiscardUnknown()

+ func (m *Command) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *Command) XXX_Size() int

+ func (m *Command) XXX_Unmarshal(b []byte) error

+ func (this *Command) String() string

+ type ConfigManagementPlugin struct

+ Generate Command

+ Init *Command

+ Name string

+ func (*ConfigManagementPlugin) Descriptor() ([]byte, []int)

+ func (*ConfigManagementPlugin) ProtoMessage()

+ func (dst *ConfigManagementPlugin) XXX_Merge(src proto.Message)

+ func (in *ConfigManagementPlugin) DeepCopy() *ConfigManagementPlugin

+ func (in *ConfigManagementPlugin) DeepCopyInto(out *ConfigManagementPlugin)

+ func (m *ConfigManagementPlugin) Marshal() (dAtA []byte, err error)

+ func (m *ConfigManagementPlugin) MarshalTo(dAtA []byte) (int, error)

+ func (m *ConfigManagementPlugin) Reset()

+ func (m *ConfigManagementPlugin) Size() (n int)

+ func (m *ConfigManagementPlugin) Unmarshal(dAtA []byte) error

+ func (m *ConfigManagementPlugin) XXX_DiscardUnknown()

+ func (m *ConfigManagementPlugin) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ConfigManagementPlugin) XXX_Size() int

+ func (m *ConfigManagementPlugin) XXX_Unmarshal(b []byte) error

+ func (this *ConfigManagementPlugin) String() string

type HealthStatusCode

+ const HealthStatusSuspended

+ type HelmParameter struct

+ Name string

+ Value string

+ func (*HelmParameter) Descriptor() ([]byte, []int)

+ func (*HelmParameter) ProtoMessage()

+ func (dst *HelmParameter) XXX_Merge(src proto.Message)

+ func (in *HelmParameter) DeepCopy() *HelmParameter

+ func (in *HelmParameter) DeepCopyInto(out *HelmParameter)

+ func (m *HelmParameter) Marshal() (dAtA []byte, err error)

+ func (m *HelmParameter) MarshalTo(dAtA []byte) (int, error)

+ func (m *HelmParameter) Reset()

+ func (m *HelmParameter) Size() (n int)

+ func (m *HelmParameter) Unmarshal(dAtA []byte) error

+ func (m *HelmParameter) XXX_DiscardUnknown()

+ func (m *HelmParameter) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *HelmParameter) XXX_Size() int

+ func (m *HelmParameter) XXX_Unmarshal(b []byte) error

+ func (this *HelmParameter) String() string

+ type JsonnetVar struct

+ Code bool

+ Name string

+ Value string

+ func (*JsonnetVar) Descriptor() ([]byte, []int)

+ func (*JsonnetVar) ProtoMessage()

+ func (dst *JsonnetVar) XXX_Merge(src proto.Message)

+ func (in *JsonnetVar) DeepCopy() *JsonnetVar

+ func (in *JsonnetVar) DeepCopyInto(out *JsonnetVar)

+ func (m *JsonnetVar) Marshal() (dAtA []byte, err error)

+ func (m *JsonnetVar) MarshalTo(dAtA []byte) (int, error)

+ func (m *JsonnetVar) Reset()

+ func (m *JsonnetVar) Size() (n int)

+ func (m *JsonnetVar) Unmarshal(dAtA []byte) error

+ func (m *JsonnetVar) XXX_DiscardUnknown()

+ func (m *JsonnetVar) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *JsonnetVar) XXX_Size() int

+ func (m *JsonnetVar) XXX_Unmarshal(b []byte) error

+ func (this *JsonnetVar) String() string

+ type KsonnetParameter struct

+ Component string

+ Name string

+ Value string

+ func (*KsonnetParameter) Descriptor() ([]byte, []int)

+ func (*KsonnetParameter) ProtoMessage()

+ func (dst *KsonnetParameter) XXX_Merge(src proto.Message)

+ func (in *KsonnetParameter) DeepCopy() *KsonnetParameter

+ func (in *KsonnetParameter) DeepCopyInto(out *KsonnetParameter)

+ func (m *KsonnetParameter) Marshal() (dAtA []byte, err error)

+ func (m *KsonnetParameter) MarshalTo(dAtA []byte) (int, error)

+ func (m *KsonnetParameter) Reset()

+ func (m *KsonnetParameter) Size() (n int)

+ func (m *KsonnetParameter) Unmarshal(dAtA []byte) error

+ func (m *KsonnetParameter) XXX_DiscardUnknown()

+ func (m *KsonnetParameter) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *KsonnetParameter) XXX_Size() int

+ func (m *KsonnetParameter) XXX_Unmarshal(b []byte) error

+ func (this *KsonnetParameter) String() string

+ type KustomizeImageTag struct

+ Name string

+ Value string

+ func (*KustomizeImageTag) Descriptor() ([]byte, []int)

+ func (*KustomizeImageTag) ProtoMessage()

+ func (dst *KustomizeImageTag) XXX_Merge(src proto.Message)

+ func (in *KustomizeImageTag) DeepCopy() *KustomizeImageTag

+ func (in *KustomizeImageTag) DeepCopyInto(out *KustomizeImageTag)

+ func (m *KustomizeImageTag) Marshal() (dAtA []byte, err error)

+ func (m *KustomizeImageTag) MarshalTo(dAtA []byte) (int, error)

+ func (m *KustomizeImageTag) Reset()

+ func (m *KustomizeImageTag) Size() (n int)

+ func (m *KustomizeImageTag) Unmarshal(dAtA []byte) error

+ func (m *KustomizeImageTag) XXX_DiscardUnknown()

+ func (m *KustomizeImageTag) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *KustomizeImageTag) XXX_Size() int

+ func (m *KustomizeImageTag) XXX_Unmarshal(b []byte) error

+ func (this *KustomizeImageTag) String() string

type Repository

+ InsecureIgnoreHostKey bool

+ type ResourceIgnoreDifferences struct

+ Group string

+ JSONPointers []string

+ Kind string

+ Name string

+ Namespace string

+ func (*ResourceIgnoreDifferences) Descriptor() ([]byte, []int)

+ func (*ResourceIgnoreDifferences) ProtoMessage()

+ func (dst *ResourceIgnoreDifferences) XXX_Merge(src proto.Message)

+ func (in *ResourceIgnoreDifferences) DeepCopy() *ResourceIgnoreDifferences

+ func (in *ResourceIgnoreDifferences) DeepCopyInto(out *ResourceIgnoreDifferences)

+ func (m *ResourceIgnoreDifferences) Marshal() (dAtA []byte, err error)

+ func (m *ResourceIgnoreDifferences) MarshalTo(dAtA []byte) (int, error)

+ func (m *ResourceIgnoreDifferences) Reset()

+ func (m *ResourceIgnoreDifferences) Size() (n int)

+ func (m *ResourceIgnoreDifferences) Unmarshal(dAtA []byte) error

+ func (m *ResourceIgnoreDifferences) XXX_DiscardUnknown()

+ func (m *ResourceIgnoreDifferences) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ResourceIgnoreDifferences) XXX_Size() int

+ func (m *ResourceIgnoreDifferences) XXX_Unmarshal(b []byte) error

+ func (this *ResourceIgnoreDifferences) String() string

type RevisionHistory

+ Source ApplicationSource

type SyncOperation

+ Source *ApplicationSource

type SyncOperationResult

+ Source ApplicationSource

Mar 20, 2019 GO-2022-0304 +26 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Mar 19, 2019 GO-2022-0304 +26 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Mar 12, 2019 GO-2022-0304 +26 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Mar 7, 2019 GO-2022-0304 +26 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Mar 6, 2019 GO-2022-0304 +26 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Mar 5, 2019 GO-2022-0304 +26 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Feb 19, 2019 GO-2022-0304 +26 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jan 18, 2019 GO-2022-0304 +26 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Changes in this version

type ApplicationSourceHelm

+ func (h *ApplicationSourceHelm) IsZero() bool

type ApplicationSourceKsonnet

+ func (k *ApplicationSourceKsonnet) IsZero() bool

type ApplicationSourceKustomize

+ func (k *ApplicationSourceKustomize) IsZero() bool

Jan 10, 2019 GO-2022-0304 +26 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Changes in this version

+ func HelmValueFiles(source *ApplicationSource) []string

+ func KsonnetEnv(source *ApplicationSource) string

type Application

+ func (app *Application) IsRefreshRequested() (RefreshType, bool)

type ApplicationDestination

+ func (source ApplicationDestination) Equals(other ApplicationDestination) bool

type ApplicationSource

+ Helm *ApplicationSourceHelm

+ Ksonnet *ApplicationSourceKsonnet

+ Kustomize *ApplicationSourceKustomize

+ type ApplicationSourceHelm struct

+ ValueFiles []string

+ func (*ApplicationSourceHelm) Descriptor() ([]byte, []int)

+ func (*ApplicationSourceHelm) ProtoMessage()

+ func (dst *ApplicationSourceHelm) XXX_Merge(src proto.Message)

+ func (in *ApplicationSourceHelm) DeepCopy() *ApplicationSourceHelm

+ func (in *ApplicationSourceHelm) DeepCopyInto(out *ApplicationSourceHelm)

+ func (m *ApplicationSourceHelm) Marshal() (dAtA []byte, err error)

+ func (m *ApplicationSourceHelm) MarshalTo(dAtA []byte) (int, error)

+ func (m *ApplicationSourceHelm) Reset()

+ func (m *ApplicationSourceHelm) Size() (n int)

+ func (m *ApplicationSourceHelm) Unmarshal(dAtA []byte) error

+ func (m *ApplicationSourceHelm) XXX_DiscardUnknown()

+ func (m *ApplicationSourceHelm) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ApplicationSourceHelm) XXX_Size() int

+ func (m *ApplicationSourceHelm) XXX_Unmarshal(b []byte) error

+ func (this *ApplicationSourceHelm) String() string

+ type ApplicationSourceKsonnet struct

+ Environment string

+ func (*ApplicationSourceKsonnet) Descriptor() ([]byte, []int)

+ func (*ApplicationSourceKsonnet) ProtoMessage()

+ func (dst *ApplicationSourceKsonnet) XXX_Merge(src proto.Message)

+ func (in *ApplicationSourceKsonnet) DeepCopy() *ApplicationSourceKsonnet

+ func (in *ApplicationSourceKsonnet) DeepCopyInto(out *ApplicationSourceKsonnet)

+ func (m *ApplicationSourceKsonnet) Marshal() (dAtA []byte, err error)

+ func (m *ApplicationSourceKsonnet) MarshalTo(dAtA []byte) (int, error)

+ func (m *ApplicationSourceKsonnet) Reset()

+ func (m *ApplicationSourceKsonnet) Size() (n int)

+ func (m *ApplicationSourceKsonnet) Unmarshal(dAtA []byte) error

+ func (m *ApplicationSourceKsonnet) XXX_DiscardUnknown()

+ func (m *ApplicationSourceKsonnet) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ApplicationSourceKsonnet) XXX_Size() int

+ func (m *ApplicationSourceKsonnet) XXX_Unmarshal(b []byte) error

+ func (this *ApplicationSourceKsonnet) String() string

+ type ApplicationSourceKustomize struct

+ NamePrefix string

+ func (*ApplicationSourceKustomize) Descriptor() ([]byte, []int)

+ func (*ApplicationSourceKustomize) ProtoMessage()

+ func (dst *ApplicationSourceKustomize) XXX_Merge(src proto.Message)

+ func (in *ApplicationSourceKustomize) DeepCopy() *ApplicationSourceKustomize

+ func (in *ApplicationSourceKustomize) DeepCopyInto(out *ApplicationSourceKustomize)

+ func (m *ApplicationSourceKustomize) Marshal() (dAtA []byte, err error)

+ func (m *ApplicationSourceKustomize) MarshalTo(dAtA []byte) (int, error)

+ func (m *ApplicationSourceKustomize) Reset()

+ func (m *ApplicationSourceKustomize) Size() (n int)

+ func (m *ApplicationSourceKustomize) Unmarshal(dAtA []byte) error

+ func (m *ApplicationSourceKustomize) XXX_DiscardUnknown()

+ func (m *ApplicationSourceKustomize) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ApplicationSourceKustomize) XXX_Size() int

+ func (m *ApplicationSourceKustomize) XXX_Unmarshal(b []byte) error

+ func (this *ApplicationSourceKustomize) String() string

+ type ApplicationSourceType string

+ const ApplicationSourceTypeDirectory

+ const ApplicationSourceTypeHelm

+ const ApplicationSourceTypeKsonnet

+ const ApplicationSourceTypeKustomize

type ApplicationStatus

+ ObservedAt metav1.Time

+ Resources []ResourceStatus

+ Sync SyncStatus

+ type ComparedTo struct

+ Destination ApplicationDestination

+ Source ApplicationSource

+ func (*ComparedTo) Descriptor() ([]byte, []int)

+ func (*ComparedTo) ProtoMessage()

+ func (dst *ComparedTo) XXX_Merge(src proto.Message)

+ func (in *ComparedTo) DeepCopy() *ComparedTo

+ func (in *ComparedTo) DeepCopyInto(out *ComparedTo)

+ func (m *ComparedTo) Marshal() (dAtA []byte, err error)

+ func (m *ComparedTo) MarshalTo(dAtA []byte) (int, error)

+ func (m *ComparedTo) Reset()

+ func (m *ComparedTo) Size() (n int)

+ func (m *ComparedTo) Unmarshal(dAtA []byte) error

+ func (m *ComparedTo) XXX_DiscardUnknown()

+ func (m *ComparedTo) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ComparedTo) XXX_Size() int

+ func (m *ComparedTo) XXX_Unmarshal(b []byte) error

+ func (this *ComparedTo) String() string

type HealthStatus

+ Message string

+ type HelmRepository struct

+ CAData []byte

+ CertData []byte

+ KeyData []byte

+ Name string

+ Password string

+ URL string

+ Username string

+ func (*HelmRepository) Descriptor() ([]byte, []int)

+ func (*HelmRepository) ProtoMessage()

+ func (dst *HelmRepository) XXX_Merge(src proto.Message)

+ func (in *HelmRepository) DeepCopy() *HelmRepository

+ func (in *HelmRepository) DeepCopyInto(out *HelmRepository)

+ func (m *HelmRepository) Marshal() (dAtA []byte, err error)

+ func (m *HelmRepository) MarshalTo(dAtA []byte) (int, error)

+ func (m *HelmRepository) Reset()

+ func (m *HelmRepository) Size() (n int)

+ func (m *HelmRepository) Unmarshal(dAtA []byte) error

+ func (m *HelmRepository) XXX_DiscardUnknown()

+ func (m *HelmRepository) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *HelmRepository) XXX_Size() int

+ func (m *HelmRepository) XXX_Unmarshal(b []byte) error

+ func (this *HelmRepository) String() string

+ type InfoItem struct

+ Name string

+ Value string

+ func (*InfoItem) Descriptor() ([]byte, []int)

+ func (*InfoItem) ProtoMessage()

+ func (dst *InfoItem) XXX_Merge(src proto.Message)

+ func (in *InfoItem) DeepCopy() *InfoItem

+ func (in *InfoItem) DeepCopyInto(out *InfoItem)

+ func (m *InfoItem) Marshal() (dAtA []byte, err error)

+ func (m *InfoItem) MarshalTo(dAtA []byte) (int, error)

+ func (m *InfoItem) Reset()

+ func (m *InfoItem) Size() (n int)

+ func (m *InfoItem) Unmarshal(dAtA []byte) error

+ func (m *InfoItem) XXX_DiscardUnknown()

+ func (m *InfoItem) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *InfoItem) XXX_Size() int

+ func (m *InfoItem) XXX_Unmarshal(b []byte) error

+ func (this *InfoItem) String() string

type ProjectRole

+ Groups []string

+ type RefreshType string

+ const RefreshTypeHard

+ const RefreshTypeNormal

+ type ResourceDiff struct

+ Diff string

+ Group string

+ Kind string

+ LiveState string

+ Name string

+ Namespace string

+ TargetState string

+ func (*ResourceDiff) Descriptor() ([]byte, []int)

+ func (*ResourceDiff) ProtoMessage()

+ func (dst *ResourceDiff) XXX_Merge(src proto.Message)

+ func (in *ResourceDiff) DeepCopy() *ResourceDiff

+ func (in *ResourceDiff) DeepCopyInto(out *ResourceDiff)

+ func (m *ResourceDiff) Marshal() (dAtA []byte, err error)

+ func (m *ResourceDiff) MarshalTo(dAtA []byte) (int, error)

+ func (m *ResourceDiff) Reset()

+ func (m *ResourceDiff) Size() (n int)

+ func (m *ResourceDiff) Unmarshal(dAtA []byte) error

+ func (m *ResourceDiff) XXX_DiscardUnknown()

+ func (m *ResourceDiff) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ResourceDiff) XXX_Size() int

+ func (m *ResourceDiff) XXX_Unmarshal(b []byte) error

+ func (r ResourceDiff) LiveObject() (*unstructured.Unstructured, error)

+ func (r ResourceDiff) TargetObject() (*unstructured.Unstructured, error)

+ func (this *ResourceDiff) String() string

type ResourceNode

+ Group string

+ Info []InfoItem

+ Kind string

+ Name string

+ Namespace string

+ ResourceVersion string

+ Version string

+ func (n *ResourceNode) FindNode(group string, kind string, namespace string, name string) *ResourceNode

+ func (n *ResourceNode) GroupKindVersion() schema.GroupVersionKind

+ type ResourceResult struct

+ Group string

+ HookPhase OperationPhase

+ HookType HookType

+ Kind string

+ Message string

+ Name string

+ Namespace string

+ Status ResultCode

+ Version string

+ func (*ResourceResult) Descriptor() ([]byte, []int)

+ func (*ResourceResult) ProtoMessage()

+ func (dst *ResourceResult) XXX_Merge(src proto.Message)

+ func (in *ResourceResult) DeepCopy() *ResourceResult

+ func (in *ResourceResult) DeepCopyInto(out *ResourceResult)

+ func (m *ResourceResult) Marshal() (dAtA []byte, err error)

+ func (m *ResourceResult) MarshalTo(dAtA []byte) (int, error)

+ func (m *ResourceResult) Reset()

+ func (m *ResourceResult) Size() (n int)

+ func (m *ResourceResult) Unmarshal(dAtA []byte) error

+ func (m *ResourceResult) XXX_DiscardUnknown()

+ func (m *ResourceResult) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ResourceResult) XXX_Size() int

+ func (m *ResourceResult) XXX_Unmarshal(b []byte) error

+ func (r *ResourceResult) GroupVersionKind() schema.GroupVersionKind

+ func (r *ResourceResult) IsHook() bool

+ func (this *ResourceResult) String() string

+ type ResourceStatus struct

+ Group string

+ Health HealthStatus

+ Hook bool

+ Kind string

+ Name string

+ Namespace string

+ Status SyncStatusCode

+ Version string

+ func (*ResourceStatus) Descriptor() ([]byte, []int)

+ func (*ResourceStatus) ProtoMessage()

+ func (dst *ResourceStatus) XXX_Merge(src proto.Message)

+ func (in *ResourceStatus) DeepCopy() *ResourceStatus

+ func (in *ResourceStatus) DeepCopyInto(out *ResourceStatus)

+ func (m *ResourceStatus) Marshal() (dAtA []byte, err error)

+ func (m *ResourceStatus) MarshalTo(dAtA []byte) (int, error)

+ func (m *ResourceStatus) Reset()

+ func (m *ResourceStatus) Size() (n int)

+ func (m *ResourceStatus) Unmarshal(dAtA []byte) error

+ func (m *ResourceStatus) XXX_DiscardUnknown()

+ func (m *ResourceStatus) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ResourceStatus) XXX_Size() int

+ func (m *ResourceStatus) XXX_Unmarshal(b []byte) error

+ func (r *ResourceStatus) GroupVersionKind() schema.GroupVersionKind

+ func (this *ResourceStatus) String() string

+ type ResultCode string

+ const ResultCodePruneSkipped

+ const ResultCodePruned

+ const ResultCodeSyncFailed

+ const ResultCodeSynced

+ func (s ResultCode) Successful() bool

+ type RevisionHistory struct

+ ComponentParameterOverrides []ComponentParameter

+ DeployedAt metav1.Time

+ ID int64

+ Revision string

+ func (*RevisionHistory) Descriptor() ([]byte, []int)

+ func (*RevisionHistory) ProtoMessage()

+ func (dst *RevisionHistory) XXX_Merge(src proto.Message)

+ func (in *RevisionHistory) DeepCopy() *RevisionHistory

+ func (in *RevisionHistory) DeepCopyInto(out *RevisionHistory)

+ func (m *RevisionHistory) Marshal() (dAtA []byte, err error)

+ func (m *RevisionHistory) MarshalTo(dAtA []byte) (int, error)

+ func (m *RevisionHistory) Reset()

+ func (m *RevisionHistory) Size() (n int)

+ func (m *RevisionHistory) Unmarshal(dAtA []byte) error

+ func (m *RevisionHistory) XXX_DiscardUnknown()

+ func (m *RevisionHistory) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *RevisionHistory) XXX_Size() int

+ func (m *RevisionHistory) XXX_Unmarshal(b []byte) error

+ func (this *RevisionHistory) String() string

+ type SyncStatus struct

+ ComparedTo ComparedTo

+ Revision string

+ Status SyncStatusCode

+ func (*SyncStatus) Descriptor() ([]byte, []int)

+ func (*SyncStatus) ProtoMessage()

+ func (dst *SyncStatus) XXX_Merge(src proto.Message)

+ func (in *SyncStatus) DeepCopy() *SyncStatus

+ func (in *SyncStatus) DeepCopyInto(out *SyncStatus)

+ func (m *SyncStatus) Marshal() (dAtA []byte, err error)

+ func (m *SyncStatus) MarshalTo(dAtA []byte) (int, error)

+ func (m *SyncStatus) Reset()

+ func (m *SyncStatus) Size() (n int)

+ func (m *SyncStatus) Unmarshal(dAtA []byte) error

+ func (m *SyncStatus) XXX_DiscardUnknown()

+ func (m *SyncStatus) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *SyncStatus) XXX_Size() int

+ func (m *SyncStatus) XXX_Unmarshal(b []byte) error

+ func (this *SyncStatus) String() string

+ type SyncStatusCode string

+ const SyncStatusCodeOutOfSync

+ const SyncStatusCodeSynced

+ const SyncStatusCodeUnknown

Jan 10, 2019 GO-2022-0304 +24 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jan 8, 2019 GO-2022-0304 +24 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jan 4, 2019 GO-2022-0304 +24 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jan 3, 2019 GO-2022-0304 +24 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Dec 28, 2018 GO-2022-0304 +24 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Dec 10, 2018 GO-2022-0304 +24 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Nov 15, 2018 GO-2022-0304 +24 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Nov 14, 2018 GO-2022-0304 +24 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Nov 8, 2018 GO-2022-0304 +24 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Oct 29, 2018 GO-2022-0304 +24 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Oct 25, 2018 GO-2022-0304 +24 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Oct 24, 2018 GO-2022-0304 +24 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Oct 19, 2018 GO-2022-0304 +24 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Changes in this version

type SyncOperation

+ Resources []SyncOperationResource

+ type SyncOperationResource struct

+ Group string

+ Kind string

+ Name string

+ func (*SyncOperationResource) Descriptor() ([]byte, []int)

+ func (*SyncOperationResource) ProtoMessage()

+ func (dst *SyncOperationResource) XXX_Merge(src proto.Message)

+ func (in *SyncOperationResource) DeepCopy() *SyncOperationResource

+ func (in *SyncOperationResource) DeepCopyInto(out *SyncOperationResource)

+ func (m *SyncOperationResource) Marshal() (dAtA []byte, err error)

+ func (m *SyncOperationResource) MarshalTo(dAtA []byte) (int, error)

+ func (m *SyncOperationResource) Reset()

+ func (m *SyncOperationResource) Size() (n int)

+ func (m *SyncOperationResource) Unmarshal(dAtA []byte) error

+ func (m *SyncOperationResource) XXX_DiscardUnknown()

+ func (m *SyncOperationResource) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *SyncOperationResource) XXX_Size() int

+ func (m *SyncOperationResource) XXX_Unmarshal(b []byte) error

+ func (r SyncOperationResource) HasIdentity(u *unstructured.Unstructured) bool

+ func (this *SyncOperationResource) String() string

Sep 28, 2018 GO-2022-0304 +24 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Sep 24, 2018 GO-2022-0304 +24 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Sep 24, 2018 GO-2022-0304 +24 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Changes in this version

+ const ApplicationConditionSyncError

+ type AWSAuthConfig struct

+ ClusterName string

+ RoleARN string

+ func (*AWSAuthConfig) Descriptor() ([]byte, []int)

+ func (*AWSAuthConfig) ProtoMessage()

+ func (dst *AWSAuthConfig) XXX_Merge(src proto.Message)

+ func (in *AWSAuthConfig) DeepCopy() *AWSAuthConfig

+ func (in *AWSAuthConfig) DeepCopyInto(out *AWSAuthConfig)

+ func (m *AWSAuthConfig) Marshal() (dAtA []byte, err error)

+ func (m *AWSAuthConfig) MarshalTo(dAtA []byte) (int, error)

+ func (m *AWSAuthConfig) Reset()

+ func (m *AWSAuthConfig) Size() (n int)

+ func (m *AWSAuthConfig) Unmarshal(dAtA []byte) error

+ func (m *AWSAuthConfig) XXX_DiscardUnknown()

+ func (m *AWSAuthConfig) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *AWSAuthConfig) XXX_Size() int

+ func (m *AWSAuthConfig) XXX_Unmarshal(b []byte) error

+ func (this *AWSAuthConfig) String() string

type AppProject

+ func (dst *AppProject) XXX_Merge(src proto.Message)

+ func (m *AppProject) XXX_DiscardUnknown()

+ func (m *AppProject) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *AppProject) XXX_Size() int

+ func (m *AppProject) XXX_Unmarshal(b []byte) error

+ func (proj AppProject) IsResourcePermitted(res metav1.GroupKind, namespaced bool) bool

type AppProjectList

+ func (dst *AppProjectList) XXX_Merge(src proto.Message)

+ func (m *AppProjectList) XXX_DiscardUnknown()

+ func (m *AppProjectList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *AppProjectList) XXX_Size() int

+ func (m *AppProjectList) XXX_Unmarshal(b []byte) error

type AppProjectSpec

+ ClusterResourceWhitelist []metav1.GroupKind

+ NamespaceResourceBlacklist []metav1.GroupKind

+ func (dst *AppProjectSpec) XXX_Merge(src proto.Message)

+ func (m *AppProjectSpec) XXX_DiscardUnknown()

+ func (m *AppProjectSpec) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *AppProjectSpec) XXX_Size() int

+ func (m *AppProjectSpec) XXX_Unmarshal(b []byte) error

type Application

+ func (dst *Application) XXX_Merge(src proto.Message)

+ func (m *Application) XXX_DiscardUnknown()

+ func (m *Application) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *Application) XXX_Size() int

+ func (m *Application) XXX_Unmarshal(b []byte) error

type ApplicationCondition

+ func (dst *ApplicationCondition) XXX_Merge(src proto.Message)

+ func (m *ApplicationCondition) XXX_DiscardUnknown()

+ func (m *ApplicationCondition) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ApplicationCondition) XXX_Size() int

+ func (m *ApplicationCondition) XXX_Unmarshal(b []byte) error

type ApplicationDestination

+ func (dst *ApplicationDestination) XXX_Merge(src proto.Message)

+ func (m *ApplicationDestination) XXX_DiscardUnknown()

+ func (m *ApplicationDestination) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ApplicationDestination) XXX_Size() int

+ func (m *ApplicationDestination) XXX_Unmarshal(b []byte) error

type ApplicationList

+ func (dst *ApplicationList) XXX_Merge(src proto.Message)

+ func (m *ApplicationList) XXX_DiscardUnknown()

+ func (m *ApplicationList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ApplicationList) XXX_Size() int

+ func (m *ApplicationList) XXX_Unmarshal(b []byte) error

type ApplicationSource

+ func (dst *ApplicationSource) XXX_Merge(src proto.Message)

+ func (m *ApplicationSource) XXX_DiscardUnknown()

+ func (m *ApplicationSource) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ApplicationSource) XXX_Size() int

+ func (m *ApplicationSource) XXX_Unmarshal(b []byte) error

type ApplicationSpec

+ func (dst *ApplicationSpec) XXX_Merge(src proto.Message)

+ func (m *ApplicationSpec) XXX_DiscardUnknown()

+ func (m *ApplicationSpec) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ApplicationSpec) XXX_Size() int

+ func (m *ApplicationSpec) XXX_Unmarshal(b []byte) error

type ApplicationStatus

+ func (dst *ApplicationStatus) XXX_Merge(src proto.Message)

+ func (m *ApplicationStatus) XXX_DiscardUnknown()

+ func (m *ApplicationStatus) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ApplicationStatus) XXX_Size() int

+ func (m *ApplicationStatus) XXX_Unmarshal(b []byte) error

type ApplicationWatchEvent

+ func (dst *ApplicationWatchEvent) XXX_Merge(src proto.Message)

+ func (m *ApplicationWatchEvent) XXX_DiscardUnknown()

+ func (m *ApplicationWatchEvent) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ApplicationWatchEvent) XXX_Size() int

+ func (m *ApplicationWatchEvent) XXX_Unmarshal(b []byte) error

type Cluster

+ func (dst *Cluster) XXX_Merge(src proto.Message)

+ func (m *Cluster) XXX_DiscardUnknown()

+ func (m *Cluster) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *Cluster) XXX_Size() int

+ func (m *Cluster) XXX_Unmarshal(b []byte) error

type ClusterConfig

+ AWSAuthConfig *AWSAuthConfig

+ func (dst *ClusterConfig) XXX_Merge(src proto.Message)

+ func (m *ClusterConfig) XXX_DiscardUnknown()

+ func (m *ClusterConfig) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ClusterConfig) XXX_Size() int

+ func (m *ClusterConfig) XXX_Unmarshal(b []byte) error

type ClusterList

+ func (dst *ClusterList) XXX_Merge(src proto.Message)

+ func (m *ClusterList) XXX_DiscardUnknown()

+ func (m *ClusterList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ClusterList) XXX_Size() int

+ func (m *ClusterList) XXX_Unmarshal(b []byte) error

type ComparisonResult

+ Revision string

+ func (dst *ComparisonResult) XXX_Merge(src proto.Message)

+ func (m *ComparisonResult) XXX_DiscardUnknown()

+ func (m *ComparisonResult) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ComparisonResult) XXX_Size() int

+ func (m *ComparisonResult) XXX_Unmarshal(b []byte) error

type ComponentParameter

+ func (dst *ComponentParameter) XXX_Merge(src proto.Message)

+ func (m *ComponentParameter) XXX_DiscardUnknown()

+ func (m *ComponentParameter) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ComponentParameter) XXX_Size() int

+ func (m *ComponentParameter) XXX_Unmarshal(b []byte) error

type ConnectionState

+ func (dst *ConnectionState) XXX_Merge(src proto.Message)

+ func (m *ConnectionState) XXX_DiscardUnknown()

+ func (m *ConnectionState) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ConnectionState) XXX_Size() int

+ func (m *ConnectionState) XXX_Unmarshal(b []byte) error

type DeploymentInfo

+ func (dst *DeploymentInfo) XXX_Merge(src proto.Message)

+ func (m *DeploymentInfo) XXX_DiscardUnknown()

+ func (m *DeploymentInfo) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *DeploymentInfo) XXX_Size() int

+ func (m *DeploymentInfo) XXX_Unmarshal(b []byte) error

type HealthStatus

+ func (dst *HealthStatus) XXX_Merge(src proto.Message)

+ func (m *HealthStatus) XXX_DiscardUnknown()

+ func (m *HealthStatus) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *HealthStatus) XXX_Size() int

+ func (m *HealthStatus) XXX_Unmarshal(b []byte) error

type HookStatus

+ func (dst *HookStatus) XXX_Merge(src proto.Message)

+ func (m *HookStatus) XXX_DiscardUnknown()

+ func (m *HookStatus) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *HookStatus) XXX_Size() int

+ func (m *HookStatus) XXX_Unmarshal(b []byte) error

type JWTToken

+ func (dst *JWTToken) XXX_Merge(src proto.Message)

+ func (m *JWTToken) XXX_DiscardUnknown()

+ func (m *JWTToken) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *JWTToken) XXX_Size() int

+ func (m *JWTToken) XXX_Unmarshal(b []byte) error

type Operation

+ func (dst *Operation) XXX_Merge(src proto.Message)

+ func (m *Operation) XXX_DiscardUnknown()

+ func (m *Operation) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *Operation) XXX_Size() int

+ func (m *Operation) XXX_Unmarshal(b []byte) error

type OperationState

+ func (dst *OperationState) XXX_Merge(src proto.Message)

+ func (m *OperationState) XXX_DiscardUnknown()

+ func (m *OperationState) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *OperationState) XXX_Size() int

+ func (m *OperationState) XXX_Unmarshal(b []byte) error

+ type ParameterOverrides []ComponentParameter

+ func (*ParameterOverrides) Descriptor() ([]byte, []int)

+ func (*ParameterOverrides) ProtoMessage()

+ func (dst *ParameterOverrides) XXX_Merge(src proto.Message)

+ func (m *ParameterOverrides) Reset()

+ func (m *ParameterOverrides) Unmarshal(dAtA []byte) error

+ func (m *ParameterOverrides) XXX_DiscardUnknown()

+ func (m *ParameterOverrides) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ParameterOverrides) XXX_Size() int

+ func (m *ParameterOverrides) XXX_Unmarshal(b []byte) error

+ func (m ParameterOverrides) Marshal() (dAtA []byte, err error)

+ func (m ParameterOverrides) MarshalTo(dAtA []byte) (int, error)

+ func (m ParameterOverrides) Size() (n int)

+ func (po ParameterOverrides) String() string

type ProjectRole

+ func (dst *ProjectRole) XXX_Merge(src proto.Message)

+ func (m *ProjectRole) XXX_DiscardUnknown()

+ func (m *ProjectRole) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ProjectRole) XXX_Size() int

+ func (m *ProjectRole) XXX_Unmarshal(b []byte) error

type Repository

+ func (dst *Repository) XXX_Merge(src proto.Message)

+ func (m *Repository) XXX_DiscardUnknown()

+ func (m *Repository) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *Repository) XXX_Size() int

+ func (m *Repository) XXX_Unmarshal(b []byte) error

type RepositoryList

+ func (dst *RepositoryList) XXX_Merge(src proto.Message)

+ func (m *RepositoryList) XXX_DiscardUnknown()

+ func (m *RepositoryList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *RepositoryList) XXX_Size() int

+ func (m *RepositoryList) XXX_Unmarshal(b []byte) error

type ResourceDetails

+ func (dst *ResourceDetails) XXX_Merge(src proto.Message)

+ func (m *ResourceDetails) XXX_DiscardUnknown()

+ func (m *ResourceDetails) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ResourceDetails) XXX_Size() int

+ func (m *ResourceDetails) XXX_Unmarshal(b []byte) error

type ResourceNode

+ func (dst *ResourceNode) XXX_Merge(src proto.Message)

+ func (m *ResourceNode) XXX_DiscardUnknown()

+ func (m *ResourceNode) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ResourceNode) XXX_Size() int

+ func (m *ResourceNode) XXX_Unmarshal(b []byte) error

type ResourceState

+ func (dst *ResourceState) XXX_Merge(src proto.Message)

+ func (m *ResourceState) XXX_DiscardUnknown()

+ func (m *ResourceState) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *ResourceState) XXX_Size() int

+ func (m *ResourceState) XXX_Unmarshal(b []byte) error

type RollbackOperation

+ func (dst *RollbackOperation) XXX_Merge(src proto.Message)

+ func (m *RollbackOperation) XXX_DiscardUnknown()

+ func (m *RollbackOperation) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *RollbackOperation) XXX_Size() int

+ func (m *RollbackOperation) XXX_Unmarshal(b []byte) error

type SyncOperation

+ ParameterOverrides ParameterOverrides

+ func (dst *SyncOperation) XXX_Merge(src proto.Message)

+ func (m *SyncOperation) XXX_DiscardUnknown()

+ func (m *SyncOperation) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *SyncOperation) XXX_Size() int

+ func (m *SyncOperation) XXX_Unmarshal(b []byte) error

type SyncOperationResult

+ func (dst *SyncOperationResult) XXX_Merge(src proto.Message)

+ func (m *SyncOperationResult) XXX_DiscardUnknown()

+ func (m *SyncOperationResult) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *SyncOperationResult) XXX_Size() int

+ func (m *SyncOperationResult) XXX_Unmarshal(b []byte) error

+ type SyncPolicy struct

+ Automated *SyncPolicyAutomated

+ func (*SyncPolicy) Descriptor() ([]byte, []int)

+ func (*SyncPolicy) ProtoMessage()

+ func (dst *SyncPolicy) XXX_Merge(src proto.Message)

+ func (in *SyncPolicy) DeepCopy() *SyncPolicy

+ func (in *SyncPolicy) DeepCopyInto(out *SyncPolicy)

+ func (m *SyncPolicy) Marshal() (dAtA []byte, err error)

+ func (m *SyncPolicy) MarshalTo(dAtA []byte) (int, error)

+ func (m *SyncPolicy) Reset()

+ func (m *SyncPolicy) Size() (n int)

+ func (m *SyncPolicy) Unmarshal(dAtA []byte) error

+ func (m *SyncPolicy) XXX_DiscardUnknown()

+ func (m *SyncPolicy) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *SyncPolicy) XXX_Size() int

+ func (m *SyncPolicy) XXX_Unmarshal(b []byte) error

+ func (this *SyncPolicy) String() string

+ type SyncPolicyAutomated struct

+ Prune bool

+ func (*SyncPolicyAutomated) Descriptor() ([]byte, []int)

+ func (*SyncPolicyAutomated) ProtoMessage()

+ func (dst *SyncPolicyAutomated) XXX_Merge(src proto.Message)

+ func (in *SyncPolicyAutomated) DeepCopy() *SyncPolicyAutomated

+ func (in *SyncPolicyAutomated) DeepCopyInto(out *SyncPolicyAutomated)

+ func (m *SyncPolicyAutomated) Marshal() (dAtA []byte, err error)

+ func (m *SyncPolicyAutomated) MarshalTo(dAtA []byte) (int, error)

+ func (m *SyncPolicyAutomated) Reset()

+ func (m *SyncPolicyAutomated) Size() (n int)

+ func (m *SyncPolicyAutomated) Unmarshal(dAtA []byte) error

+ func (m *SyncPolicyAutomated) XXX_DiscardUnknown()

+ func (m *SyncPolicyAutomated) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *SyncPolicyAutomated) XXX_Size() int

+ func (m *SyncPolicyAutomated) XXX_Unmarshal(b []byte) error

+ func (this *SyncPolicyAutomated) String() string

type SyncStrategy

+ func (dst *SyncStrategy) XXX_Merge(src proto.Message)

+ func (m *SyncStrategy) XXX_DiscardUnknown()

+ func (m *SyncStrategy) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *SyncStrategy) XXX_Size() int

+ func (m *SyncStrategy) XXX_Unmarshal(b []byte) error

type SyncStrategyApply

+ func (dst *SyncStrategyApply) XXX_Merge(src proto.Message)

+ func (m *SyncStrategyApply) XXX_DiscardUnknown()

+ func (m *SyncStrategyApply) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *SyncStrategyApply) XXX_Size() int

+ func (m *SyncStrategyApply) XXX_Unmarshal(b []byte) error

type SyncStrategyHook

+ func (dst *SyncStrategyHook) XXX_Merge(src proto.Message)

+ func (m *SyncStrategyHook) XXX_DiscardUnknown()

+ func (m *SyncStrategyHook) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *SyncStrategyHook) XXX_Size() int

+ func (m *SyncStrategyHook) XXX_Unmarshal(b []byte) error

type TLSClientConfig

+ func (dst *TLSClientConfig) XXX_Merge(src proto.Message)

+ func (m *TLSClientConfig) XXX_DiscardUnknown()

+ func (m *TLSClientConfig) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *TLSClientConfig) XXX_Size() int

+ func (m *TLSClientConfig) XXX_Unmarshal(b []byte) error

Sep 12, 2018 GO-2022-0304 +24 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Sep 10, 2018 GO-2022-0304 +24 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Sep 5, 2018 GO-2022-0304 +24 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Changes in this version

type AppProject

+ func (proj *AppProject) ProjectPoliciesString() string

type AppProjectSpec

+ Roles []ProjectRole

+ type JWTToken struct

+ ExpiresAt int64

+ IssuedAt int64

+ func (*JWTToken) Descriptor() ([]byte, []int)

+ func (*JWTToken) ProtoMessage()

+ func (in *JWTToken) DeepCopy() *JWTToken

+ func (in *JWTToken) DeepCopyInto(out *JWTToken)

+ func (m *JWTToken) Marshal() (dAtA []byte, err error)

+ func (m *JWTToken) MarshalTo(dAtA []byte) (int, error)

+ func (m *JWTToken) Reset()

+ func (m *JWTToken) Size() (n int)

+ func (m *JWTToken) Unmarshal(dAtA []byte) error

+ func (this *JWTToken) String() string

+ type ProjectRole struct

+ Description string

+ JWTTokens []JWTToken

+ Name string

+ Policies []string

+ func (*ProjectRole) Descriptor() ([]byte, []int)

+ func (*ProjectRole) ProtoMessage()

+ func (in *ProjectRole) DeepCopy() *ProjectRole

+ func (in *ProjectRole) DeepCopyInto(out *ProjectRole)

+ func (m *ProjectRole) Marshal() (dAtA []byte, err error)

+ func (m *ProjectRole) MarshalTo(dAtA []byte) (int, error)

+ func (m *ProjectRole) Reset()

+ func (m *ProjectRole) Size() (n int)

+ func (m *ProjectRole) Unmarshal(dAtA []byte) error

+ func (this *ProjectRole) String() string

Aug 21, 2018 GO-2022-0304 +24 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Aug 3, 2018 GO-2022-0304 +24 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jul 28, 2018 GO-2022-0304 +24 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Changes in this version

type ApplicationSource

+ ValuesFiles []string

Jul 21, 2018 GO-2022-0304 +23 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jul 18, 2018 GO-2022-0304 +23 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jul 17, 2018 GO-2022-0304 +23 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Changes in this version

+ const ApplicationConditionComparisonError

+ const ApplicationConditionInvalidSpecError

+ const ApplicationConditionSharedResourceWarning

+ const ApplicationConditionUnknownError

+ const HealthStatusMissing

+ var AppProjectSchemaGroupVersionKind = schema.GroupVersionKind

+ type AppProject struct

+ Spec AppProjectSpec

+ func GetDefaultProject(namespace string) AppProject

+ func (*AppProject) Descriptor() ([]byte, []int)

+ func (*AppProject) ProtoMessage()

+ func (in *AppProject) DeepCopy() *AppProject

+ func (in *AppProject) DeepCopyInto(out *AppProject)

+ func (in *AppProject) DeepCopyObject() runtime.Object

+ func (m *AppProject) Marshal() (dAtA []byte, err error)

+ func (m *AppProject) MarshalTo(dAtA []byte) (int, error)

+ func (m *AppProject) Reset()

+ func (m *AppProject) Size() (n int)

+ func (m *AppProject) Unmarshal(dAtA []byte) error

+ func (proj AppProject) IsDefault() bool

+ func (proj AppProject) IsDestinationPermitted(dst ApplicationDestination) bool

+ func (proj AppProject) IsSourcePermitted(src ApplicationSource) bool

+ func (this *AppProject) String() string

+ type AppProjectList struct

+ Items []AppProject

+ func (*AppProjectList) Descriptor() ([]byte, []int)

+ func (*AppProjectList) ProtoMessage()

+ func (in *AppProjectList) DeepCopy() *AppProjectList

+ func (in *AppProjectList) DeepCopyInto(out *AppProjectList)

+ func (in *AppProjectList) DeepCopyObject() runtime.Object

+ func (m *AppProjectList) Marshal() (dAtA []byte, err error)

+ func (m *AppProjectList) MarshalTo(dAtA []byte) (int, error)

+ func (m *AppProjectList) Reset()

+ func (m *AppProjectList) Size() (n int)

+ func (m *AppProjectList) Unmarshal(dAtA []byte) error

+ func (this *AppProjectList) String() string

+ type AppProjectSpec struct

+ Description string

+ Destinations []ApplicationDestination

+ SourceRepos []string

+ func (*AppProjectSpec) Descriptor() ([]byte, []int)

+ func (*AppProjectSpec) ProtoMessage()

+ func (in *AppProjectSpec) DeepCopy() *AppProjectSpec

+ func (in *AppProjectSpec) DeepCopyInto(out *AppProjectSpec)

+ func (m *AppProjectSpec) Marshal() (dAtA []byte, err error)

+ func (m *AppProjectSpec) MarshalTo(dAtA []byte) (int, error)

+ func (m *AppProjectSpec) Reset()

+ func (m *AppProjectSpec) Size() (n int)

+ func (m *AppProjectSpec) Unmarshal(dAtA []byte) error

+ func (this *AppProjectSpec) String() string

type ApplicationCondition

+ func (condition *ApplicationCondition) IsError() bool

type ApplicationSpec

+ Project string

+ func (spec ApplicationSpec) BelongsToDefaultProject() bool

+ func (spec ApplicationSpec) GetProject() string

type ApplicationStatus

+ func (status *ApplicationStatus) GetErrorConditions() []ApplicationCondition

+ type HookDeletePolicy string

+ const HookDeletePolicyHookFailed

+ const HookDeletePolicyHookSucceeded

+ type HookStatus struct

+ APIVersion string

+ Kind string

+ Message string

+ Name string

+ Status OperationPhase

+ Type HookType

+ func (*HookStatus) Descriptor() ([]byte, []int)

+ func (*HookStatus) ProtoMessage()

+ func (in *HookStatus) DeepCopy() *HookStatus

+ func (in *HookStatus) DeepCopyInto(out *HookStatus)

+ func (m *HookStatus) Marshal() (dAtA []byte, err error)

+ func (m *HookStatus) MarshalTo(dAtA []byte) (int, error)

+ func (m *HookStatus) Reset()

+ func (m *HookStatus) Size() (n int)

+ func (m *HookStatus) Unmarshal(dAtA []byte) error

+ func (this *HookStatus) String() string

+ type HookType string

+ const HookTypePostSync

+ const HookTypePreSync

+ const HookTypeSkip

+ const HookTypeSync

type OperationPhase

+ const OperationTerminating

type ResourceSyncStatus

+ func (s ResourceSyncStatus) Successful() bool

type SyncOperation

+ SyncStrategy *SyncStrategy

type SyncOperationResult

+ Hooks []*HookStatus

+ Revision string

+ type SyncStrategy struct

+ Apply *SyncStrategyApply

+ Hook *SyncStrategyHook

+ func (*SyncStrategy) Descriptor() ([]byte, []int)

+ func (*SyncStrategy) ProtoMessage()

+ func (in *SyncStrategy) DeepCopy() *SyncStrategy

+ func (in *SyncStrategy) DeepCopyInto(out *SyncStrategy)

+ func (m *SyncStrategy) Marshal() (dAtA []byte, err error)

+ func (m *SyncStrategy) MarshalTo(dAtA []byte) (int, error)

+ func (m *SyncStrategy) Reset()

+ func (m *SyncStrategy) Size() (n int)

+ func (m *SyncStrategy) Unmarshal(dAtA []byte) error

+ func (this *SyncStrategy) String() string

+ type SyncStrategyApply struct

+ Force bool

+ func (*SyncStrategyApply) Descriptor() ([]byte, []int)

+ func (*SyncStrategyApply) ProtoMessage()

+ func (in *SyncStrategyApply) DeepCopy() *SyncStrategyApply

+ func (in *SyncStrategyApply) DeepCopyInto(out *SyncStrategyApply)

+ func (m *SyncStrategyApply) Marshal() (dAtA []byte, err error)

+ func (m *SyncStrategyApply) MarshalTo(dAtA []byte) (int, error)

+ func (m *SyncStrategyApply) Reset()

+ func (m *SyncStrategyApply) Size() (n int)

+ func (m *SyncStrategyApply) Unmarshal(dAtA []byte) error

+ func (this *SyncStrategyApply) String() string

+ type SyncStrategyHook struct

+ func (*SyncStrategyHook) Descriptor() ([]byte, []int)

+ func (*SyncStrategyHook) ProtoMessage()

+ func (in *SyncStrategyHook) DeepCopy() *SyncStrategyHook

+ func (in *SyncStrategyHook) DeepCopyInto(out *SyncStrategyHook)

+ func (m *SyncStrategyHook) Marshal() (dAtA []byte, err error)

+ func (m *SyncStrategyHook) MarshalTo(dAtA []byte) (int, error)

+ func (m *SyncStrategyHook) Reset()

+ func (m *SyncStrategyHook) Size() (n int)

+ func (m *SyncStrategyHook) Unmarshal(dAtA []byte) error

+ func (this *SyncStrategyHook) String() string

Jun 27, 2018 GO-2022-0304 +23 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jun 20, 2018 GO-2022-0304 +23 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jun 14, 2018 GO-2022-0304 +23 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jun 13, 2018 GO-2022-0304 +23 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jun 12, 2018 GO-2022-0304 +23 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Changes in this version

+ const ConnectionStatusFailed

+ const ConnectionStatusSuccessful

+ const ConnectionStatusUnknown

type Cluster

+ ConnectionState ConnectionState

+ type ConnectionState struct

+ Message string

+ ModifiedAt *metav1.Time

+ Status ConnectionStatus

+ func (*ConnectionState) Descriptor() ([]byte, []int)

+ func (*ConnectionState) ProtoMessage()

+ func (in *ConnectionState) DeepCopy() *ConnectionState

+ func (in *ConnectionState) DeepCopyInto(out *ConnectionState)

+ func (m *ConnectionState) Marshal() (dAtA []byte, err error)

+ func (m *ConnectionState) MarshalTo(dAtA []byte) (int, error)

+ func (m *ConnectionState) Reset()

+ func (m *ConnectionState) Size() (n int)

+ func (m *ConnectionState) Unmarshal(dAtA []byte) error

+ func (this *ConnectionState) String() string

+ type ConnectionStatus = string

type Repository

+ ConnectionState ConnectionState

type ResourceDetails

+ Status ResourceSyncStatus

+ type ResourceSyncStatus string

+ const ResourceDetailsPruningRequired

+ const ResourceDetailsSyncFailed

+ const ResourceDetailsSynced

+ const ResourceDetailsSyncedAndPruned

Jun 7, 2018 GO-2022-0304 +20 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Jun 6, 2018 GO-2022-0304 +20 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

May 31, 2018 GO-2022-0304 +20 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

May 30, 2018 GO-2022-0304 +20 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Changes in this version

type Cluster

+ Message string

type Repository

+ Message string

May 21, 2018 GO-2022-0304 +20 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

May 21, 2018 GO-2022-0304 +20 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

May 18, 2018 GO-2022-0304 +20 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

May 17, 2018 GO-2022-0304 +20 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Changes in this version

+ const ApplicationConditionDeletionError

+ const HealthStatusDegraded

+ const HealthStatusHealthy

+ const HealthStatusProgressing

+ const HealthStatusUnknown

type Application

+ Operation *Operation

+ func (app *Application) CascadedDeletion() bool

+ func (app *Application) SetCascadedDeletion(prune bool)

+ type ApplicationCondition struct

+ Message string

+ Type ApplicationConditionType

+ func (*ApplicationCondition) Descriptor() ([]byte, []int)

+ func (*ApplicationCondition) ProtoMessage()

+ func (in *ApplicationCondition) DeepCopy() *ApplicationCondition

+ func (in *ApplicationCondition) DeepCopyInto(out *ApplicationCondition)

+ func (m *ApplicationCondition) Marshal() (dAtA []byte, err error)

+ func (m *ApplicationCondition) MarshalTo(dAtA []byte) (int, error)

+ func (m *ApplicationCondition) Reset()

+ func (m *ApplicationCondition) Size() (n int)

+ func (m *ApplicationCondition) Unmarshal(dAtA []byte) error

+ func (this *ApplicationCondition) String() string

+ type ApplicationConditionType = string

type ApplicationStatus

+ Conditions []ApplicationCondition

+ Health HealthStatus

+ History []DeploymentInfo

+ OperationState *OperationState

+ type HealthStatus struct

+ Status HealthStatusCode

+ StatusDetails string

+ func (*HealthStatus) Descriptor() ([]byte, []int)

+ func (*HealthStatus) ProtoMessage()

+ func (in *HealthStatus) DeepCopy() *HealthStatus

+ func (in *HealthStatus) DeepCopyInto(out *HealthStatus)

+ func (m *HealthStatus) Marshal() (dAtA []byte, err error)

+ func (m *HealthStatus) MarshalTo(dAtA []byte) (int, error)

+ func (m *HealthStatus) Reset()

+ func (m *HealthStatus) Size() (n int)

+ func (m *HealthStatus) Unmarshal(dAtA []byte) error

+ func (this *HealthStatus) String() string

+ type HealthStatusCode = string

+ type Operation struct

+ Rollback *RollbackOperation

+ Sync *SyncOperation

+ func (*Operation) Descriptor() ([]byte, []int)

+ func (*Operation) ProtoMessage()

+ func (in *Operation) DeepCopy() *Operation

+ func (in *Operation) DeepCopyInto(out *Operation)

+ func (m *Operation) Marshal() (dAtA []byte, err error)

+ func (m *Operation) MarshalTo(dAtA []byte) (int, error)

+ func (m *Operation) Reset()

+ func (m *Operation) Size() (n int)

+ func (m *Operation) Unmarshal(dAtA []byte) error

+ func (this *Operation) String() string

+ type OperationPhase string

+ const OperationError

+ const OperationFailed

+ const OperationRunning

+ const OperationSucceeded

+ func (os OperationPhase) Completed() bool

+ func (os OperationPhase) Successful() bool

+ type OperationState struct

+ FinishedAt *metav1.Time

+ Message string

+ Operation Operation

+ Phase OperationPhase

+ RollbackResult *SyncOperationResult

+ StartedAt metav1.Time

+ SyncResult *SyncOperationResult

+ func (*OperationState) Descriptor() ([]byte, []int)

+ func (*OperationState) ProtoMessage()

+ func (in *OperationState) DeepCopy() *OperationState

+ func (in *OperationState) DeepCopyInto(out *OperationState)

+ func (m *OperationState) Marshal() (dAtA []byte, err error)

+ func (m *OperationState) MarshalTo(dAtA []byte) (int, error)

+ func (m *OperationState) Reset()

+ func (m *OperationState) Size() (n int)

+ func (m *OperationState) Unmarshal(dAtA []byte) error

+ func (this *OperationState) String() string

+ type ResourceDetails struct

+ Kind string

+ Message string

+ Name string

+ Namespace string

+ func (*ResourceDetails) Descriptor() ([]byte, []int)

+ func (*ResourceDetails) ProtoMessage()

+ func (in *ResourceDetails) DeepCopy() *ResourceDetails

+ func (in *ResourceDetails) DeepCopyInto(out *ResourceDetails)

+ func (m *ResourceDetails) Marshal() (dAtA []byte, err error)

+ func (m *ResourceDetails) MarshalTo(dAtA []byte) (int, error)

+ func (m *ResourceDetails) Reset()

+ func (m *ResourceDetails) Size() (n int)

+ func (m *ResourceDetails) Unmarshal(dAtA []byte) error

+ func (this *ResourceDetails) String() string

type ResourceState

+ Health HealthStatus

+ func (r ResourceState) LiveObject() (*unstructured.Unstructured, error)

+ func (r ResourceState) TargetObject() (*unstructured.Unstructured, error)

+ type RollbackOperation struct

+ DryRun bool

+ ID int64

+ Prune bool

+ func (*RollbackOperation) Descriptor() ([]byte, []int)

+ func (*RollbackOperation) ProtoMessage()

+ func (in *RollbackOperation) DeepCopy() *RollbackOperation

+ func (in *RollbackOperation) DeepCopyInto(out *RollbackOperation)

+ func (m *RollbackOperation) Marshal() (dAtA []byte, err error)

+ func (m *RollbackOperation) MarshalTo(dAtA []byte) (int, error)

+ func (m *RollbackOperation) Reset()

+ func (m *RollbackOperation) Size() (n int)

+ func (m *RollbackOperation) Unmarshal(dAtA []byte) error

+ func (this *RollbackOperation) String() string

+ type SyncOperation struct

+ DryRun bool

+ Prune bool

+ Revision string

+ func (*SyncOperation) Descriptor() ([]byte, []int)

+ func (*SyncOperation) ProtoMessage()

+ func (in *SyncOperation) DeepCopy() *SyncOperation

+ func (in *SyncOperation) DeepCopyInto(out *SyncOperation)

+ func (m *SyncOperation) Marshal() (dAtA []byte, err error)

+ func (m *SyncOperation) MarshalTo(dAtA []byte) (int, error)

+ func (m *SyncOperation) Reset()

+ func (m *SyncOperation) Size() (n int)

+ func (m *SyncOperation) Unmarshal(dAtA []byte) error

+ func (this *SyncOperation) String() string

+ type SyncOperationResult struct

+ Resources []*ResourceDetails

+ func (*SyncOperationResult) Descriptor() ([]byte, []int)

+ func (*SyncOperationResult) ProtoMessage()

+ func (in *SyncOperationResult) DeepCopy() *SyncOperationResult

+ func (in *SyncOperationResult) DeepCopyInto(out *SyncOperationResult)

+ func (m *SyncOperationResult) Marshal() (dAtA []byte, err error)

+ func (m *SyncOperationResult) MarshalTo(dAtA []byte) (int, error)

+ func (m *SyncOperationResult) Reset()

+ func (m *SyncOperationResult) Size() (n int)

+ func (m *SyncOperationResult) Unmarshal(dAtA []byte) error

+ func (this *SyncOperationResult) String() string

May 11, 2018 GO-2022-0304 +19 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

May 3, 2018 GO-2022-0304 +19 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

May 1, 2018 GO-2022-0304 +19 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Apr 24, 2018 GO-2022-0304 +19 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Changes in this version

type DeploymentInfo

+ ID int64

Apr 23, 2018 GO-2022-0304 +19 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Changes in this version

type ApplicationSpec

+ SyncPolicy string

type ApplicationStatus

+ Parameters []ComponentParameter

+ type ResourceNode struct

+ Children []ResourceNode

+ State string

+ func (*ResourceNode) Descriptor() ([]byte, []int)

+ func (*ResourceNode) ProtoMessage()

+ func (in *ResourceNode) DeepCopy() *ResourceNode

+ func (in *ResourceNode) DeepCopyInto(out *ResourceNode)

+ func (m *ResourceNode) Marshal() (dAtA []byte, err error)

+ func (m *ResourceNode) MarshalTo(dAtA []byte) (int, error)

+ func (m *ResourceNode) Reset()

+ func (m *ResourceNode) Size() (n int)

+ func (m *ResourceNode) Unmarshal(dAtA []byte) error

+ func (this *ResourceNode) String() string

type ResourceState

+ ChildLiveResources []ResourceNode

Mar 29, 2018 GO-2022-0304 +19 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

Changes in this version

+ var AddToScheme = SchemeBuilder.AddToScheme

+ var ApplicationSchemaGroupVersionKind = schema.GroupVersionKind

+ var ErrIntOverflowGenerated = fmt.Errorf("proto: integer overflow")

+ var ErrInvalidLengthGenerated = fmt.Errorf("proto: negative length found during unmarshaling")

+ var SchemeBuilder = runtime.NewSchemeBuilder(addKnownTypes)

+ var SchemeGroupVersion = schema.GroupVersion

+ func Resource(resource string) schema.GroupResource

+ func UnmarshalToUnstructured(resource string) (*unstructured.Unstructured, error)

+ type Application struct

+ Spec ApplicationSpec

+ Status ApplicationStatus

+ func (*Application) Descriptor() ([]byte, []int)

+ func (*Application) ProtoMessage()

+ func (a *Application) GetMetadata() *objectMeta

+ func (app *Application) NeedRefreshAppStatus(statusRefreshTimeout time.Duration) bool

+ func (in *Application) DeepCopy() *Application

+ func (in *Application) DeepCopyInto(out *Application)

+ func (in *Application) DeepCopyObject() runtime.Object

+ func (m *Application) Marshal() (dAtA []byte, err error)

+ func (m *Application) MarshalTo(dAtA []byte) (int, error)

+ func (m *Application) Reset()

+ func (m *Application) Size() (n int)

+ func (m *Application) Unmarshal(dAtA []byte) error

+ func (this *Application) String() string

+ type ApplicationDestination struct

+ Namespace string

+ Server string

+ func (*ApplicationDestination) Descriptor() ([]byte, []int)

+ func (*ApplicationDestination) ProtoMessage()

+ func (in *ApplicationDestination) DeepCopy() *ApplicationDestination

+ func (in *ApplicationDestination) DeepCopyInto(out *ApplicationDestination)

+ func (m *ApplicationDestination) Marshal() (dAtA []byte, err error)

+ func (m *ApplicationDestination) MarshalTo(dAtA []byte) (int, error)

+ func (m *ApplicationDestination) Reset()

+ func (m *ApplicationDestination) Size() (n int)

+ func (m *ApplicationDestination) Unmarshal(dAtA []byte) error

+ func (this *ApplicationDestination) String() string

+ type ApplicationList struct

+ Items []Application

+ func (*ApplicationList) Descriptor() ([]byte, []int)

+ func (*ApplicationList) ProtoMessage()

+ func (in *ApplicationList) DeepCopy() *ApplicationList

+ func (in *ApplicationList) DeepCopyInto(out *ApplicationList)

+ func (in *ApplicationList) DeepCopyObject() runtime.Object

+ func (m *ApplicationList) Marshal() (dAtA []byte, err error)

+ func (m *ApplicationList) MarshalTo(dAtA []byte) (int, error)

+ func (m *ApplicationList) Reset()

+ func (m *ApplicationList) Size() (n int)

+ func (m *ApplicationList) Unmarshal(dAtA []byte) error

+ func (this *ApplicationList) String() string

+ type ApplicationSource struct

+ ComponentParameterOverrides []ComponentParameter

+ Environment string

+ Path string

+ RepoURL string

+ TargetRevision string

+ func (*ApplicationSource) Descriptor() ([]byte, []int)

+ func (*ApplicationSource) ProtoMessage()

+ func (in *ApplicationSource) DeepCopy() *ApplicationSource

+ func (in *ApplicationSource) DeepCopyInto(out *ApplicationSource)

+ func (m *ApplicationSource) Marshal() (dAtA []byte, err error)

+ func (m *ApplicationSource) MarshalTo(dAtA []byte) (int, error)

+ func (m *ApplicationSource) Reset()

+ func (m *ApplicationSource) Size() (n int)

+ func (m *ApplicationSource) Unmarshal(dAtA []byte) error

+ func (source ApplicationSource) Equals(other ApplicationSource) bool

+ func (this *ApplicationSource) String() string

+ type ApplicationSpec struct

+ Destination *ApplicationDestination

+ Source ApplicationSource

+ func (*ApplicationSpec) Descriptor() ([]byte, []int)

+ func (*ApplicationSpec) ProtoMessage()

+ func (in *ApplicationSpec) DeepCopy() *ApplicationSpec

+ func (in *ApplicationSpec) DeepCopyInto(out *ApplicationSpec)

+ func (m *ApplicationSpec) Marshal() (dAtA []byte, err error)

+ func (m *ApplicationSpec) MarshalTo(dAtA []byte) (int, error)

+ func (m *ApplicationSpec) Reset()

+ func (m *ApplicationSpec) Size() (n int)

+ func (m *ApplicationSpec) Unmarshal(dAtA []byte) error

+ func (this *ApplicationSpec) String() string

+ type ApplicationStatus struct

+ ComparisonResult ComparisonResult

+ RecentDeployments []DeploymentInfo

+ func (*ApplicationStatus) Descriptor() ([]byte, []int)

+ func (*ApplicationStatus) ProtoMessage()

+ func (in *ApplicationStatus) DeepCopy() *ApplicationStatus

+ func (in *ApplicationStatus) DeepCopyInto(out *ApplicationStatus)

+ func (m *ApplicationStatus) Marshal() (dAtA []byte, err error)

+ func (m *ApplicationStatus) MarshalTo(dAtA []byte) (int, error)

+ func (m *ApplicationStatus) Reset()

+ func (m *ApplicationStatus) Size() (n int)

+ func (m *ApplicationStatus) Unmarshal(dAtA []byte) error

+ func (this *ApplicationStatus) String() string

+ type ApplicationWatchEvent struct

+ Application Application

+ Type watch.EventType

+ func (*ApplicationWatchEvent) Descriptor() ([]byte, []int)

+ func (*ApplicationWatchEvent) ProtoMessage()

+ func (in *ApplicationWatchEvent) DeepCopy() *ApplicationWatchEvent

+ func (in *ApplicationWatchEvent) DeepCopyInto(out *ApplicationWatchEvent)

+ func (m *ApplicationWatchEvent) Marshal() (dAtA []byte, err error)

+ func (m *ApplicationWatchEvent) MarshalTo(dAtA []byte) (int, error)

+ func (m *ApplicationWatchEvent) Reset()

+ func (m *ApplicationWatchEvent) Size() (n int)

+ func (m *ApplicationWatchEvent) Unmarshal(dAtA []byte) error

+ func (this *ApplicationWatchEvent) String() string

+ type Cluster struct

+ Config ClusterConfig

+ Name string

+ Server string

+ func (*Cluster) Descriptor() ([]byte, []int)

+ func (*Cluster) ProtoMessage()

+ func (c *Cluster) RESTConfig() *rest.Config

+ func (in *Cluster) DeepCopy() *Cluster

+ func (in *Cluster) DeepCopyInto(out *Cluster)

+ func (m *Cluster) Marshal() (dAtA []byte, err error)

+ func (m *Cluster) MarshalTo(dAtA []byte) (int, error)

+ func (m *Cluster) Reset()

+ func (m *Cluster) Size() (n int)

+ func (m *Cluster) Unmarshal(dAtA []byte) error

+ func (this *Cluster) String() string

+ type ClusterConfig struct

+ BearerToken string

+ Password string

+ Username string

+ func (*ClusterConfig) Descriptor() ([]byte, []int)

+ func (*ClusterConfig) ProtoMessage()

+ func (in *ClusterConfig) DeepCopy() *ClusterConfig

+ func (in *ClusterConfig) DeepCopyInto(out *ClusterConfig)

+ func (m *ClusterConfig) Marshal() (dAtA []byte, err error)

+ func (m *ClusterConfig) MarshalTo(dAtA []byte) (int, error)

+ func (m *ClusterConfig) Reset()

+ func (m *ClusterConfig) Size() (n int)

+ func (m *ClusterConfig) Unmarshal(dAtA []byte) error

+ func (this *ClusterConfig) String() string

+ type ClusterList struct

+ Items []Cluster

+ func (*ClusterList) Descriptor() ([]byte, []int)

+ func (*ClusterList) ProtoMessage()

+ func (in *ClusterList) DeepCopy() *ClusterList

+ func (in *ClusterList) DeepCopyInto(out *ClusterList)

+ func (m *ClusterList) Marshal() (dAtA []byte, err error)

+ func (m *ClusterList) MarshalTo(dAtA []byte) (int, error)

+ func (m *ClusterList) Reset()

+ func (m *ClusterList) Size() (n int)

+ func (m *ClusterList) Unmarshal(dAtA []byte) error

+ func (this *ClusterList) String() string

+ type ComparisonResult struct

+ ComparedAt metav1.Time

+ ComparedTo ApplicationSource

+ Error string

+ Namespace string

+ Resources []ResourceState

+ Server string

+ Status ComparisonStatus

+ func (*ComparisonResult) Descriptor() ([]byte, []int)

+ func (*ComparisonResult) ProtoMessage()

+ func (cr *ComparisonResult) LiveObjects() ([]*unstructured.Unstructured, error)

+ func (cr *ComparisonResult) TargetObjects() ([]*unstructured.Unstructured, error)

+ func (in *ComparisonResult) DeepCopy() *ComparisonResult

+ func (in *ComparisonResult) DeepCopyInto(out *ComparisonResult)

+ func (m *ComparisonResult) Marshal() (dAtA []byte, err error)

+ func (m *ComparisonResult) MarshalTo(dAtA []byte) (int, error)

+ func (m *ComparisonResult) Reset()

+ func (m *ComparisonResult) Size() (n int)

+ func (m *ComparisonResult) Unmarshal(dAtA []byte) error

+ func (this *ComparisonResult) String() string

+ type ComparisonStatus string

+ const ComparisonStatusError

+ const ComparisonStatusOutOfSync

+ const ComparisonStatusSynced

+ const ComparisonStatusUnknown

+ type ComponentParameter struct

+ Component string

+ Name string

+ Value string

+ func (*ComponentParameter) Descriptor() ([]byte, []int)

+ func (*ComponentParameter) ProtoMessage()

+ func (in *ComponentParameter) DeepCopy() *ComponentParameter

+ func (in *ComponentParameter) DeepCopyInto(out *ComponentParameter)

+ func (m *ComponentParameter) Marshal() (dAtA []byte, err error)

+ func (m *ComponentParameter) MarshalTo(dAtA []byte) (int, error)

+ func (m *ComponentParameter) Reset()

+ func (m *ComponentParameter) Size() (n int)

+ func (m *ComponentParameter) Unmarshal(dAtA []byte) error

+ func (this *ComponentParameter) String() string

+ type DeploymentInfo struct

+ ComponentParameterOverrides []ComponentParameter

+ DeployedAt metav1.Time

+ Params []ComponentParameter

+ Revision string

+ func (*DeploymentInfo) Descriptor() ([]byte, []int)

+ func (*DeploymentInfo) ProtoMessage()

+ func (in *DeploymentInfo) DeepCopy() *DeploymentInfo

+ func (in *DeploymentInfo) DeepCopyInto(out *DeploymentInfo)

+ func (m *DeploymentInfo) Marshal() (dAtA []byte, err error)

+ func (m *DeploymentInfo) MarshalTo(dAtA []byte) (int, error)

+ func (m *DeploymentInfo) Reset()

+ func (m *DeploymentInfo) Size() (n int)

+ func (m *DeploymentInfo) Unmarshal(dAtA []byte) error

+ func (this *DeploymentInfo) String() string

+ type Repository struct

+ Password string

+ Repo string

+ SSHPrivateKey string

+ Username string

+ func (*Repository) Descriptor() ([]byte, []int)

+ func (*Repository) ProtoMessage()

+ func (in *Repository) DeepCopy() *Repository

+ func (in *Repository) DeepCopyInto(out *Repository)

+ func (m *Repository) Marshal() (dAtA []byte, err error)

+ func (m *Repository) MarshalTo(dAtA []byte) (int, error)

+ func (m *Repository) Reset()

+ func (m *Repository) Size() (n int)

+ func (m *Repository) Unmarshal(dAtA []byte) error

+ func (this *Repository) String() string

+ type RepositoryList struct

+ Items []Repository

+ func (*RepositoryList) Descriptor() ([]byte, []int)

+ func (*RepositoryList) ProtoMessage()

+ func (in *RepositoryList) DeepCopy() *RepositoryList

+ func (in *RepositoryList) DeepCopyInto(out *RepositoryList)

+ func (m *RepositoryList) Marshal() (dAtA []byte, err error)

+ func (m *RepositoryList) MarshalTo(dAtA []byte) (int, error)

+ func (m *RepositoryList) Reset()

+ func (m *RepositoryList) Size() (n int)

+ func (m *RepositoryList) Unmarshal(dAtA []byte) error

+ func (this *RepositoryList) String() string

+ type ResourceState struct

+ LiveState string

+ Status ComparisonStatus

+ TargetState string

+ func (*ResourceState) Descriptor() ([]byte, []int)

+ func (*ResourceState) ProtoMessage()

+ func (in *ResourceState) DeepCopy() *ResourceState

+ func (in *ResourceState) DeepCopyInto(out *ResourceState)

+ func (m *ResourceState) Marshal() (dAtA []byte, err error)

+ func (m *ResourceState) MarshalTo(dAtA []byte) (int, error)

+ func (m *ResourceState) Reset()

+ func (m *ResourceState) Size() (n int)

+ func (m *ResourceState) Unmarshal(dAtA []byte) error

+ func (this *ResourceState) String() string

+ type TLSClientConfig struct

+ CAData []byte

+ CertData []byte

+ Insecure bool

+ KeyData []byte

+ ServerName string

+ func (*TLSClientConfig) Descriptor() ([]byte, []int)

+ func (*TLSClientConfig) ProtoMessage()

+ func (in *TLSClientConfig) DeepCopy() *TLSClientConfig

+ func (in *TLSClientConfig) DeepCopyInto(out *TLSClientConfig)

+ func (m *TLSClientConfig) Marshal() (dAtA []byte, err error)

+ func (m *TLSClientConfig) MarshalTo(dAtA []byte) (int, error)

+ func (m *TLSClientConfig) Reset()

+ func (m *TLSClientConfig) Size() (n int)

+ func (m *TLSClientConfig) Unmarshal(dAtA []byte) error

+ func (this *TLSClientConfig) String() string

Mar 12, 2018 GO-2022-0304 +19 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0387: Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0869: Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd

  GO-2022-0892: Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1952: Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd