Skip to content
OpenAdvisories

Package · Wolfi

argo-cd-3.4-compat

44 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 2.0
    CVE-2026-81870

    OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

    OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, expo…

    open-telemetry opentelemetry-go zot kubescape Debian Ubuntu Azure Linux Wolfi Go
  • Low 2.1
    CVE-2026-48978

    oras-go: Malicious registry can hijack Bearer token realm to exfiltrate credentials and refresh tokens

    oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, auth.Client follows the realm URL from a registry's WWW-Authenticate: Bearer challenge without validating the scheme or host, allowing a malicious or compromised registry to cause SSRF to int…

    oras-project oras-go kubescape kots Debian Ubuntu Wolfi Go
  • Low 2.3
    CVE-2026-45570

    go-git: Improper single-quote escaping in go-git SSH transport

    go-git is an extensible git implementation library written in pure Go. Prior to 5.19.1 and 6.0.0-alpha.4, go-git's SSH transport constructs the remote exec command by wrapping the repository path in single quotes without escaping single quotes embedded inside…

    go-git go-git zot kubescape Debian Ubuntu Azure Linux Wolfi Go