Skip to content
OpenAdvisories

Package · Go

github.com/argoproj/argo-cd/v3

11 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.3

    Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations

    Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 3.2.0 until 3.2.12, 3.3.10, and 3.4.2, Argo CD ServerSideDiff can expose Kubernetes Secret values embedded in the kubectl.kubernetes.io/last-applied-configuration annotation becaus…

  • Medium 6.5

    Repository Credentials Race Condition Crashes Argo CD Server

    Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions between 2.1.0 and 2.14.19, 3.2.0-rc1, 3.1.0-rc1 through 3.1.7, and 3.0.0-rc1 through 3.0.18 contain a race condition in the repository credentials handler that can cause the Ar…