Affected by GO-2023-2018
and 15 other vulnerabilities
GO-2023-2018: Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd
GO-2023-2049: Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd
GO-2023-2050: Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd
GO-2024-2646: Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2
GO-2024-2667: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2
GO-2024-2728: Argo CD's API server does not enforce project sourceNamespaces in github.com/argoproj/argo-cd
GO-2024-2792: Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd
GO-2024-2877: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd
GO-2024-2898: Argo-cd authenticated users can enumerate clusters by name in github.com/argoproj/argo-cd
GO-2024-3002: Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd
GO-2024-3006: The Argo CD web terminal session does not handle the revocation of user permissions properly in github.com/argoproj/argo-cd
GO-2025-3433: Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd
GO-2025-3720: Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd
GO-2025-3993: Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd
GO-2025-3994: Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd
GO-2025-3996: argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd

The highest tagged major version is
v3.
package
Version:
v2.7.2
Opens a new window with list of versions in this module.
Published: May 12, 2023
License: Apache-2.0, Apache-2.0
Opens a new window with license information.
Imports: 1
Opens a new window with list of imports.
Imported by: 2
Opens a new window with list of known importers.
README
¶
Argo CD UI
Web UI for Argo CD.
Getting started
- Install NodeJS and Yarn. On macOS with Homebrew, running
brew install node yarn will accomplish this.
- Run
yarn install to install local prerequisites.
- Run
yarn start to launch the webpack dev UI server.
- Run
yarn build to bundle static resources into the ./dist directory.
To build a Docker image, run IMAGE_NAMESPACE=yourimagerepo IMAGE_TAG=latest yarn docker.
To do the same and push to a Docker registry, run IMAGE_NAMESPACE=yourimagerepo IMAGE_TAG=latest DOCKER_PUSH=true yarn docker.
Pre-commit Checks
Make sure your code passes the lint checks:
yarn lint --fix
Documentation
¶
Embedded contains embedded UI resources
Source Files
¶
Click to show internal directories.
Click to hide internal directories.