Argoproj vulnerabilities
74 CVEs and advisories name Argoproj as an affected vendor, newest first. Follow it as a feed.
- CVE-2022-31102Cross-site Scripting for Argo CD single sign on users
- CVE-2022-31105Argo CD's certificate verification is skipped for connections to OIDC providers
- CVE-2022-31036Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server
- CVE-2022-31035External URLs for Deployments can include javascript in argo-cd
- CVE-2022-31034Insecure entropy in argo-cd
- CVE-2022-31016Argo CD vulnerable to Uncontrolled Memory Consumption
- CVE-2022-31054Uses of deprecated API can be used to cause DoS in user-facing endpoints in Argo Events
- CVE-2022-29165Argo CD will blindly trust JWT claims if anonymous access is enabled
- CVE-2022-24905Argo CD login screen allows message spoofing if SSO is enabled
- CVE-2022-24904Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server
- CVE-2022-29164Privilege Escalation in argo-workflows
- CVE-2022-24768Improper access control allows admin privilege escalation in Argo CD
- CVE-2022-24731Path traversal allows leaking out-of-bound files from Argo CD repo-server
- CVE-2022-24730Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server