argo-cd-3.2-repo-server

3 results · Clear filters · Feed

• Medium 5.8
  CVE-2025-13281

  Portworx Half-Blind SSRF in kube-controller-manager

  A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control pl…

  Kubernetes Kubernetes kots argocd-image-updater Debian Azure Linux Wolfi Go
  Dec 14, 2025
• Medium 5.3
  CVE-2025-47914

  Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.

  golang.org/x/crypto golang.org/x/crypto/ssh/agent katib-earlystopping katib-suggestion-pbt-enas Debian Ubuntu Alpine Wolfi Go
  Nov 19, 2025
• Medium 5.3
  CVE-2025-58181

  Unbounded memory consumption in golang.org/x/crypto/ssh

  SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.

  golang.org/x/crypto golang.org/x/crypto/ssh katib-earlystopping katib-suggestion-skopt-enas Debian Ubuntu Alpine Wolfi Go
  Nov 19, 2025