Skip to content
OpenAdvisories

Package · Go

github.com/argoproj/gitops-engine

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    GHSA-274v-mgcv-cm8j

    Argo CD GitOps Engine does not scrub secret values from patch errors

    ### Impact A vulnerability was discovered in Argo CD that exposed secret values in error messages and the diff view when an invalid Kubernetes Secret resource was synced from a repository. The vulnerability assumes the user has write access to the repository …

    github.com/argoproj/gitops-engine Go