exec

Sep 22, 2025 GO-2025-3993 +3 more

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Sep 18, 2025 GO-2025-3993 +3 more

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Sep 4, 2025 GO-2025-3993 +3 more

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Sep 4, 2025 GO-2025-3993 +3 more

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jun 16, 2025 GO-2025-3934 +4 more

  GO-2025-3934: Argo CD's Project API Token Exposes Repository Credentials in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jun 9, 2025 GO-2025-3934 +4 more

  GO-2025-3934: Argo CD's Project API Token Exposes Repository Credentials in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

May 28, 2025 GO-2025-3934 +4 more

  GO-2025-3934: Argo CD's Project API Token Exposes Repository Credentials in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

May 20, 2025 GO-2025-3720 +5 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3934: Argo CD's Project API Token Exposes Repository Credentials in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Apr 22, 2025 GO-2025-3720 +5 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3934: Argo CD's Project API Token Exposes Repository Credentials in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Apr 14, 2025 GO-2025-3720 +5 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3934: Argo CD's Project API Token Exposes Repository Credentials in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Apr 2, 2025 GO-2025-3720 +5 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3934: Argo CD's Project API Token Exposes Repository Credentials in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 24, 2025 GO-2025-3720 +5 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3934: Argo CD's Project API Token Exposes Repository Credentials in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 19, 2025 GO-2025-3720 +5 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3934: Argo CD's Project API Token Exposes Repository Credentials in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 18, 2025 GO-2025-3720 +5 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3934: Argo CD's Project API Token Exposes Repository Credentials in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 11, 2025 GO-2025-3720 +5 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3934: Argo CD's Project API Token Exposes Repository Credentials in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 4, 2025 GO-2025-3720 +5 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3934: Argo CD's Project API Token Exposes Repository Credentials in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Feb 27, 2025 GO-2025-3720 +5 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3934: Argo CD's Project API Token Exposes Repository Credentials in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Feb 5, 2025 GO-2025-3720 +5 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3934: Argo CD's Project API Token Exposes Repository Credentials in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Feb 3, 2025 GO-2025-3720 +5 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3934: Argo CD's Project API Token Exposes Repository Credentials in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Feb 3, 2025 GO-2025-3720 +5 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3934: Argo CD's Project API Token Exposes Repository Credentials in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jan 29, 2025 GO-2025-3720 +4 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jan 21, 2025 GO-2025-3720 +4 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jan 8, 2025 GO-2025-3720 +4 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Dec 23, 2024 GO-2025-3720 +4 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Dec 18, 2024 GO-2025-3720 +4 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Dec 17, 2024 GO-2025-3720 +4 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Dec 17, 2024 GO-2025-3720 +4 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Sep 4, 2025 GO-2025-3993 +3 more

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

May 28, 2025 GO-2025-3934 +4 more

  GO-2025-3934: Argo CD's Project API Token Exposes Repository Credentials in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Apr 10, 2025 GO-2025-3720 +5 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3934: Argo CD's Project API Token Exposes Repository Credentials in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 24, 2025 GO-2025-3720 +5 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3934: Argo CD's Project API Token Exposes Repository Credentials in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Feb 5, 2025 GO-2025-3720 +5 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3934: Argo CD's Project API Token Exposes Repository Credentials in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jan 29, 2025 GO-2025-3720 +5 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3934: Argo CD's Project API Token Exposes Repository Credentials in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jan 3, 2025 GO-2025-3433 +6 more

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3934: Argo CD's Project API Token Exposes Repository Credentials in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Dec 11, 2024 GO-2025-3433 +6 more

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3934: Argo CD's Project API Token Exposes Repository Credentials in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Nov 20, 2024 GO-2025-3433 +6 more

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3934: Argo CD's Project API Token Exposes Repository Credentials in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Sep 16, 2024 GO-2025-3433 +6 more

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3934: Argo CD's Project API Token Exposes Repository Credentials in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Changes in this version

+ func GetCommandArgsToLog(cmd *exec.Cmd) string

Oct 18, 2024 GO-2025-3720 +4 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Oct 17, 2024 GO-2025-3720 +4 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Oct 7, 2024 GO-2025-3720 +4 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Sep 20, 2024 GO-2025-3720 +4 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Sep 16, 2024 GO-2025-3720 +4 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Sep 8, 2025 GO-2025-3720 +4 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Apr 11, 2025 GO-2025-3720 +4 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 24, 2025 GO-2025-3720 +4 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jan 29, 2025 GO-2025-3720 +4 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jan 3, 2025 GO-2025-3433 +5 more

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Dec 11, 2024 GO-2025-3433 +5 more

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Nov 5, 2024 GO-2025-3433 +5 more

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Oct 18, 2024 GO-2025-3433 +5 more

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Oct 17, 2024 GO-2025-3433 +5 more

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Sep 26, 2024 GO-2025-3433 +5 more

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Aug 27, 2024 GO-2025-3433 +5 more

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Aug 23, 2024 GO-2025-3433 +5 more

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Aug 16, 2024 GO-2025-3433 +5 more

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Aug 5, 2024 GO-2025-3433 +5 more

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Aug 1, 2024 GO-2025-3720 +4 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jul 15, 2024 GO-2025-3720 +4 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jul 2, 2024 GO-2025-3720 +4 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jun 24, 2024 GO-2025-3720 +4 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jun 18, 2024 GO-2025-3720 +4 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Sep 8, 2025 GO-2025-3720 +4 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jan 29, 2025 GO-2025-3720 +4 more

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Nov 5, 2024 GO-2025-3433 +5 more

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Oct 18, 2024 GO-2025-3433 +5 more

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Oct 17, 2024 GO-2025-3433 +5 more

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Sep 26, 2024 GO-2025-3433 +5 more

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Sep 11, 2024 GO-2025-3433 +5 more

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jul 24, 2024 GO-2025-3433 +5 more

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jul 22, 2024 GO-2024-3006 +6 more

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jul 15, 2024 GO-2024-3002 +7 more

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jul 2, 2024 GO-2024-3002 +7 more

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jun 6, 2024 GO-2024-3002 +7 more

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

May 23, 2024 GO-2024-2898 +9 more

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

May 21, 2024 GO-2024-2898 +9 more

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

May 7, 2024 GO-2024-2877 +10 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Apr 29, 2024 GO-2024-2877 +6 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Apr 15, 2024 GO-2024-2877 +6 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Apr 5, 2024 GO-2024-2877 +6 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Sep 8, 2025 GO-2025-3433 +5 more

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Sep 8, 2025 GO-2025-3433 +5 more

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Oct 17, 2024 GO-2025-3433 +5 more

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Sep 26, 2024 GO-2025-3433 +5 more

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jul 24, 2024 GO-2025-3433 +5 more

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jul 22, 2024 GO-2024-3006 +6 more

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jul 15, 2024 GO-2024-3002 +7 more

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jul 2, 2024 GO-2024-3002 +7 more

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jun 6, 2024 GO-2024-3002 +7 more

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

May 23, 2024 GO-2024-2898 +9 more

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

May 21, 2024 GO-2024-2898 +9 more

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Apr 30, 2024 GO-2024-2877 +10 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Apr 26, 2024 GO-2024-2877 +10 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Apr 15, 2024 GO-2024-2792 +11 more

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Apr 5, 2024 GO-2024-2728 +12 more

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 28, 2024 GO-2024-2728 +12 more

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 18, 2024 GO-2024-2667 +13 more

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 13, 2024 GO-2024-2652 +15 more

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 1, 2024 GO-2024-2643 +17 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Feb 13, 2024 GO-2024-2643 +17 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Feb 5, 2024 GO-2024-2643 +17 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Feb 2, 2024 GO-2024-2877 +6 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jan 25, 2024 GO-2024-2877 +6 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jan 19, 2024 GO-2024-2877 +6 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jan 18, 2024 GO-2024-2877 +6 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Dec 18, 2023 GO-2024-2877 +6 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Aug 22, 2024 GO-2025-3433 +5 more

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jul 24, 2024 GO-2025-3433 +5 more

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jul 22, 2024 GO-2024-3006 +6 more

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jul 15, 2024 GO-2024-3002 +7 more

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jul 2, 2024 GO-2024-3002 +7 more

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jun 6, 2024 GO-2024-3002 +7 more

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

May 23, 2024 GO-2024-2898 +9 more

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

May 21, 2024 GO-2024-2898 +9 more

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Apr 30, 2024 GO-2024-2877 +10 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Apr 26, 2024 GO-2024-2877 +10 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Apr 15, 2024 GO-2024-2792 +11 more

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Apr 4, 2024 GO-2024-2728 +12 more

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 28, 2024 GO-2024-2728 +12 more

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 18, 2024 GO-2024-2667 +13 more

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 13, 2024 GO-2024-2652 +15 more

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 1, 2024 GO-2024-2643 +17 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Feb 2, 2024 GO-2024-2643 +17 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jan 19, 2024 GO-2024-2643 +17 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jan 18, 2024 GO-2024-2643 +17 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Dec 1, 2023 GO-2024-2643 +17 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-2902: Unauthenticated Access to sensitive settings in Argo CD in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Nov 20, 2023 GO-2024-2643 +16 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Nov 14, 2023 GO-2024-2643 +16 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Nov 6, 2023 GO-2024-2643 +16 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Oct 31, 2023 GO-2024-2877 +9 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Oct 25, 2023 GO-2024-2877 +9 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Oct 3, 2023 GO-2024-2877 +9 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Sep 25, 2023 GO-2024-2877 +9 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3995: Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Aug 21, 2024 GO-2024-2898 +7 more

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

May 23, 2024 GO-2024-2898 +7 more

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

May 21, 2024 GO-2024-2898 +7 more

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Apr 30, 2024 GO-2024-2877 +8 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Apr 26, 2024 GO-2024-2877 +8 more

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Apr 15, 2024 GO-2024-2792 +9 more

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Apr 4, 2024 GO-2024-2728 +10 more

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 28, 2024 GO-2024-2728 +10 more

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 18, 2024 GO-2024-2667 +11 more

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 13, 2024 GO-2024-2652 +13 more

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 1, 2024 GO-2024-2643 +15 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Feb 2, 2024 GO-2024-2643 +15 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jan 19, 2024 GO-2024-2643 +15 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jan 19, 2024 GO-2024-2643 +15 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Nov 20, 2023 GO-2024-2643 +15 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Oct 31, 2023 GO-2024-2643 +15 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Oct 26, 2023 GO-2024-2643 +15 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Sep 13, 2023 GO-2024-2643 +15 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Sep 7, 2023 GO-2024-2643 +15 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Aug 24, 2023 GO-2023-2049 +17 more

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Aug 21, 2023 GO-2023-2049 +17 more

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Aug 7, 2023 GO-2023-2018 +18 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Aug 3, 2023 GO-2024-2643 +15 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jul 27, 2023 GO-2024-2643 +15 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jul 19, 2023 GO-2024-2643 +15 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jul 18, 2023 GO-2024-2643 +15 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jul 12, 2023 GO-2024-2643 +15 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jul 5, 2023 GO-2024-2643 +15 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jun 27, 2023 GO-2024-2643 +15 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Apr 4, 2024 GO-2024-2643 +15 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Feb 2, 2024 GO-2024-2643 +15 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jan 19, 2024 GO-2024-2643 +15 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Nov 2, 2023 GO-2024-2643 +15 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Sep 7, 2023 GO-2024-2643 +15 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Aug 24, 2023 GO-2023-2049 +17 more

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Aug 21, 2023 GO-2023-2049 +17 more

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Aug 7, 2023 GO-2023-2018 +18 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jul 31, 2023 GO-2023-2018 +18 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jul 24, 2023 GO-2023-2018 +18 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jul 19, 2023 GO-2023-2018 +18 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jul 5, 2023 GO-2023-2018 +18 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jun 20, 2023 GO-2023-2018 +18 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jun 16, 2023 GO-2023-2018 +18 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jun 5, 2023 GO-2023-2018 +18 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

May 24, 2023 GO-2023-2018 +18 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

May 12, 2023 GO-2023-2018 +18 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

May 2, 2023 GO-2023-2018 +18 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

May 2, 2023 GO-2023-2018 +18 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Apr 11, 2023 GO-2024-2643 +15 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 27, 2023 GO-2024-2643 +15 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Sep 7, 2023 GO-2024-2643 +15 more

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Aug 7, 2023 GO-2023-2049 +17 more

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jul 19, 2023 GO-2023-2018 +18 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jul 5, 2023 GO-2023-2018 +18 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Changes in this version

type ExecRunOpts

+ CaptureStderr bool

+ SkipErrorLogging bool

Jun 20, 2023 GO-2023-2018 +18 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jun 16, 2023 GO-2023-2018 +18 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jun 5, 2023 GO-2023-2018 +18 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

May 25, 2023 GO-2023-2018 +18 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 23, 2023 GO-2023-2018 +18 more

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 16, 2023 GO-2023-1670 +19 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 14, 2023 GO-2023-1670 +19 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 7, 2023 GO-2023-1670 +19 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Feb 27, 2023 GO-2023-1670 +19 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Feb 16, 2023 GO-2023-1670 +19 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Feb 8, 2023 GO-2023-1577 +20 more

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Feb 6, 2023 GO-2023-1548 +21 more

  GO-2023-1548: Repository access credential leak in github.com/argoproj/argo-cd/v2

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Changes in this version

+ func RunWithExecRunOpts(cmd *exec.Cmd, opts ExecRunOpts) (string, error)

+ type ExecRunOpts struct

+ Redactor func(text string) string

+ TimeoutBehavior argoexec.TimeoutBehavior

Feb 2, 2023 GO-2023-1548 +17 more

  GO-2023-1548: Repository access credential leak in github.com/argoproj/argo-cd/v2

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jan 27, 2023 GO-2023-1548 +17 more

  GO-2023-1548: Repository access credential leak in github.com/argoproj/argo-cd/v2

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jan 25, 2023 GO-2023-1548 +17 more

  GO-2023-1548: Repository access credential leak in github.com/argoproj/argo-cd/v2

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jan 18, 2023 GO-2023-1512 +19 more

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1548: Repository access credential leak in github.com/argoproj/argo-cd/v2

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jan 13, 2023 GO-2023-1520 +18 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1548: Repository access credential leak in github.com/argoproj/argo-cd/v2

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jan 5, 2023 GO-2023-1520 +18 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1548: Repository access credential leak in github.com/argoproj/argo-cd/v2

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Dec 19, 2022 GO-2023-1520 +18 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1548: Repository access credential leak in github.com/argoproj/argo-cd/v2

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Aug 7, 2023 GO-2023-2049 +16 more

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jul 19, 2023 GO-2023-2049 +16 more

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jul 5, 2023 GO-2023-2049 +16 more

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jun 16, 2023 GO-2023-2049 +16 more

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jun 5, 2023 GO-2023-2049 +16 more

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

May 25, 2023 GO-2023-2049 +16 more

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 23, 2023 GO-2023-2049 +16 more

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 16, 2023 GO-2023-1670 +17 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 14, 2023 GO-2023-1670 +17 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 7, 2023 GO-2023-1670 +17 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Feb 27, 2023 GO-2023-1670 +17 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Feb 16, 2023 GO-2023-1670 +17 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Feb 2, 2023 GO-2023-1577 +18 more

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jan 27, 2023 GO-2023-1577 +18 more

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jan 25, 2023 GO-2023-1577 +18 more

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jan 18, 2023 GO-2023-1512 +20 more

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jan 10, 2023 GO-2023-1512 +20 more

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Dec 16, 2022 GO-2023-1512 +20 more

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Dec 6, 2022 GO-2023-1512 +20 more

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Nov 28, 2022 GO-2023-1512 +20 more

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Nov 7, 2022 GO-2023-1512 +20 more

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Nov 1, 2022 GO-2023-1512 +20 more

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Oct 24, 2022 GO-2023-1512 +20 more

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Oct 17, 2022 GO-2023-1512 +17 more

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Oct 11, 2022 GO-2023-1512 +17 more

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Oct 5, 2022 GO-2023-1512 +17 more

  GO-2023-1512: Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 23, 2023 GO-2023-2049 +16 more

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 16, 2023 GO-2023-1670 +17 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 14, 2023 GO-2023-1670 +17 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 7, 2023 GO-2023-1670 +17 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Feb 27, 2023 GO-2023-1670 +17 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Feb 16, 2023 GO-2023-1670 +17 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Feb 2, 2023 GO-2023-1577 +18 more

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jan 27, 2023 GO-2023-1577 +18 more

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jan 25, 2023 GO-2023-1577 +18 more

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jan 18, 2023 GO-2023-1520 +19 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Dec 16, 2022 GO-2023-1520 +19 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Nov 7, 2022 GO-2023-1520 +19 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Nov 1, 2022 GO-2023-1520 +19 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Oct 17, 2022 GO-2023-1520 +19 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Oct 5, 2022 GO-2023-1520 +19 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Oct 3, 2022 GO-2023-1520 +19 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Sep 16, 2022 GO-2023-1520 +19 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Aug 22, 2022 GO-2023-1520 +19 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Aug 17, 2022 GO-2023-1520 +19 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Aug 11, 2022 GO-2023-1520 +19 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jul 29, 2022 GO-2023-1520 +19 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jul 18, 2022 GO-2023-1520 +19 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jul 12, 2022 GO-2023-1520 +19 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jul 12, 2022 GO-2023-1520 +19 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jul 7, 2022 GO-2022-0517 +21 more

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jun 27, 2022 GO-2022-0517 +21 more

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jun 21, 2022 GO-2022-0517 +21 more

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jun 21, 2022 GO-2022-0517 +21 more

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jun 10, 2022 GO-2022-0495 +25 more

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

  GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jun 6, 2022 GO-2023-1670 +14 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jun 1, 2022 GO-2023-1670 +14 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

May 31, 2022 GO-2023-1670 +14 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

May 18, 2022 GO-2023-1670 +14 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

May 6, 2022 GO-2023-1670 +14 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Feb 16, 2023 GO-2023-1670 +14 more

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Feb 2, 2023 GO-2023-1577 +15 more

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jan 27, 2023 GO-2023-1577 +15 more

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jan 25, 2023 GO-2023-1577 +15 more

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jan 18, 2023 GO-2023-1520 +16 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Dec 16, 2022 GO-2023-1520 +16 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Nov 1, 2022 GO-2023-1520 +16 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Oct 17, 2022 GO-2023-1520 +16 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Oct 5, 2022 GO-2023-1520 +16 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Oct 3, 2022 GO-2023-1520 +16 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jul 29, 2022 GO-2023-1520 +16 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jul 12, 2022 GO-2023-1520 +16 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jun 21, 2022 GO-2022-0517 +18 more

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

May 18, 2022 GO-2022-0495 +22 more

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 29, 2022 GO-2022-0453 +25 more

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 23, 2022 GO-2022-0453 +25 more

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 10, 2022 GO-2022-0359 +27 more

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 6, 2022 GO-2022-0359 +27 more

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0517: Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1577: Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Feb 4, 2022 GO-2022-0357 +18 more

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Feb 3, 2022 GO-2022-0357 +18 more

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Feb 2, 2022 GO-2022-0357 +18 more

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jan 30, 2022 GO-2022-0357 +18 more

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Nov 1, 2022 GO-2023-1520 +16 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Oct 18, 2022 GO-2023-1520 +16 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Oct 5, 2022 GO-2023-1520 +16 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Oct 3, 2022 GO-2023-1520 +16 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jul 29, 2022 GO-2023-1520 +16 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jul 12, 2022 GO-2023-1520 +16 more

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jun 21, 2022 GO-2022-0518 +17 more

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

May 18, 2022 GO-2022-0495 +21 more

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 23, 2022 GO-2022-0453 +24 more

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 28, 2022 GO-2022-0359 +26 more

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 9, 2022 GO-2022-0359 +26 more

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 6, 2022 GO-2022-0359 +26 more

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Feb 5, 2022 GO-2022-0357 +28 more

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Feb 3, 2022 GO-2022-0357 +28 more

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jan 18, 2022 GO-2022-0304 +29 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jan 1, 2022 GO-2022-0304 +29 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Dec 17, 2021 GO-2022-0304 +29 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Dec 14, 2021 GO-2022-0304 +29 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Nov 12, 2021 GO-2022-0518 +16 more

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jun 21, 2022 GO-2022-0518 +16 more

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

May 18, 2022 GO-2022-0495 +20 more

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 23, 2022 GO-2022-0453 +23 more

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 22, 2022 GO-2022-0359 +25 more

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 9, 2022 GO-2022-0359 +25 more

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Mar 6, 2022 GO-2022-0359 +25 more

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Feb 5, 2022 GO-2022-0357 +27 more

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Feb 3, 2022 GO-2022-0357 +27 more

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Dec 13, 2021 GO-2022-0304 +28 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Nov 17, 2021 GO-2022-0304 +28 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Oct 28, 2021 GO-2022-0304 +28 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Oct 20, 2021 GO-2022-0304 +28 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Oct 20, 2021 GO-2022-0304 +28 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Sep 29, 2021 GO-2022-0304 +28 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Sep 2, 2021 GO-2022-0304 +28 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Nov 19, 2021 GO-2022-0304 +28 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Aug 25, 2021 GO-2022-0304 +28 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Aug 20, 2021 GO-2022-0304 +28 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Aug 11, 2021 GO-2022-0304 +27 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Aug 3, 2021 GO-2022-0304 +27 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jul 28, 2021 GO-2022-0304 +27 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jul 22, 2021 GO-2022-0304 +27 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Jun 23, 2021 GO-2022-0304 +27 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

May 27, 2021 GO-2022-0304 +27 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

May 20, 2021 GO-2022-0304 +27 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Apr 15, 2021 GO-2022-0304 +27 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Apr 7, 2021 GO-2022-0304 +27 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0454: Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2643: Bypass manifest during application creation in github.com/argoproj/argo-cd/v2

  GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Changes in this version

+ func Run(cmd *exec.Cmd) (string, error)

+ func RunWithRedactor(cmd *exec.Cmd, redactor func(text string) string) (string, error)

Apr 5, 2021 GO-2022-0304 +24 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

Apr 2, 2021 GO-2022-0304 +24 more

  GO-2022-0304: Path traversal and dereference of symlinks in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0357: Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0358: Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0359: Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0453: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0455: Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd

  GO-2022-0495: DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

  GO-2022-0497: Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params in github.com/argoproj/argo-cd

  GO-2022-0498: Argo CD's external URLs for Deployments can include JavaScript in github.com/argoproj/argo-cd

  GO-2022-0499: Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2022-0516: Argo CD improper access control bug can allow malicious user to escalate privileges to admin level in github.com/argoproj/argo-cd

  GO-2022-0518: Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd

  GO-2023-1520: JWT audience claim is not verified in github.com/argoproj/argo-cd

  GO-2023-1670: Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd

  GO-2023-2085: Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd

  GO-2024-2652: Brute force protection bypass in github.com/argoproj/argo-cd/v2

  GO-2024-2654: Denial of service in github.com/argoproj/argo-cd/v2

  GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

  GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

  GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd

  GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd

  GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

  GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd

  GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd

  GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd