argoproj Vulnerability Advisory Catalog

Total 73 security vulnerabilities recorded for argoproj software and firmware.

← Back to All Vendors
Component: argo_cd

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD has a Web-based terminal that allows users to get a shell inside a r...

📅 2024-07-24
CVSS 4.7 Dossier →
Component: argo_cd

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. This report details a security vulnerability in Argo CD, where an unauthenti...

📅 2024-07-22
CVSS 7.5 Dossier →
Component: argo_cd

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. The vulnerability allows unauthorized access to the sensitive settings expos...

📅 2024-06-06
CVSS 5.3 Dossier →
Component: argo_cd

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. It’s possible for authenticated users to enumerate clusters by name by inspe...

📅 2024-06-06
CVSS 4.3 Dossier →
CVE-2024-31989 CRITICAL
Component: argo_cd

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. It has been discovered that an unprivileged pod in a different namespace on ...

📅 2024-05-21
CVSS 9.0 Dossier →
Component: argo_cd

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. There is a Denial of Service (DoS) vulnerability via OOM using jq in ignoreD...

📅 2024-05-14
CVSS 6.5 Dossier →
Component: argo_cd

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. The API server does not enforce project sourceNamespaces which allows attack...

📅 2024-04-15
CVSS 4.8 Dossier →
Component: argo_cd

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of ArgoCD starting from v2.4 have a bug where the ArgoCD repo-s...

📅 2024-03-29
CVSS 6.5 Dossier →
Component: argo_cd

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Prior to versions 2.8.13, 2.9.9, and 2.10.4, an attacker can effectively byp...

📅 2024-03-18
CVSS 7.5 Dossier →
Component: argo_cd

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Prior to versions 2.8.13, 2.9.9, and 2.10.4, an attacker can exploit a criti...

📅 2024-03-18
CVSS 7.5 Dossier →
CVE-2024-21652 CRITICAL
Component: argo_cd

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Prior to versions 2.8.13, 2.9.9, and 2.10.4, an attacker can exploit a chain...

📅 2024-03-18
CVSS 9.8 Dossier →
CVE-2024-28175 CRITICAL
Component: argo_cd

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Due to the improper URL protocols filtering of links specified in the `link....

📅 2024-03-13
CVSS 9.0 Dossier →
Component: argo_cd

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. "Local sync" is an Argo CD feature that allows developers to temporarily ove...

📅 2024-03-13
CVSS 6.4 Dossier →
Component: argo_cd

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. The Argo CD API prior to versions 2.10-rc2, 2.9.4, 2.8.8, and 2.7.15 are vul...

📅 2024-01-19
CVSS 8.3 Dossier →
Component: argo_cd

Argo CD is a declarative continuous deployment framework for Kubernetes. In Argo CD versions prior to 2.3 (starting at least in v0.1.0, but likely in ...

📅 2023-09-27
CVSS 5.0 Dossier →
Component: argo_cd

Argo CD is a declarative continuous deployment for Kubernetes. All versions of ArgoCD starting from v2.4 have a bug where the ArgoCD repo-server compo...

📅 2023-09-07
CVSS 6.5 Dossier →
CVE-2023-40029 CRITICAL
Component: argo_cd

Argo CD is a declarative continuous deployment for Kubernetes. Argo CD Cluster secrets might be managed declaratively using Argo CD / kubectl apply. A...

📅 2023-09-07
CVSS 9.9 Dossier →
Component: argo_cd

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of Argo CD starting from version 2.6.0 have a bug where open we...

📅 2023-08-23
CVSS 4.7 Dossier →
CVE-2023-23947 CRITICAL
Component: argo_cd

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All Argo CD versions starting with 2.3.0-rc1 and prior to 2.3.17, 2.4.23 2....

📅 2023-02-16
CVSS 9.1 Dossier →
Component: argo_cd

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of Argo CD starting with v2.6.0-rc1 have an output sanitization...

📅 2023-02-08
CVSS 6.3 Dossier →
Component: argo_cd

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions starting with 2.5.0-rc1 and above, prior to 2.5.8, and version 2.6....

📅 2023-01-26
CVSS 8.5 Dossier →
CVE-2023-22482 CRITICAL
Component: argo_cd

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions of Argo CD starting with v1.8.2 and prior to 2.3.13, 2.4.19, 2.5.6,...

📅 2023-01-26
CVSS 9.0 Dossier →
Component: argo_cd

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD starting with version 0.4.0 and prior to 2.2.11, 2.3.6, and 2.4.5 is...

📅 2022-07-12
CVSS 8.3 Dossier →
Component: argo_cd

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD starting with 2.3.0 and prior to 2.3.6 and 2.4.5 is vulnerable to a ...

📅 2022-07-12
CVSS 2.6 Dossier →
Page 2 of 4 (73 Total Records)