argoproj/argo-cd Security Advisories | GitStock

medium2022-06-21

Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server

GHSA-q4w5-4gq2-98vm · CVE-2022-31036

critical2022-06-21

Argo CD's external URLs for Deployments can include JavaScript

GHSA-h4w9-6x78-8vrj · CVE-2022-31035

high2022-06-21

Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params

GHSA-2m7h-86qq-fp4v · CVE-2022-31034

medium2022-05-24

Argo Exposure of Sensitive Information

GHSA-xj7v-c82w-92q2 · CVE-2018-21034

critical2022-03-24

Improper access control allows admin privilege escalation in Argo CD

GHSA-2f5v-8r3f-8pww · CVE-2022-24768

medium2022-03-24

Path traversal allows leaking out-of-bound files from Argo CD repo-server

GHSA-h6h5-6fmq-rh28 · CVE-2022-24731

high2022-03-24

Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server

GHSA-r9cr-hvjj-496v · CVE-2022-24730

high2022-02-07

Path traversal and dereference of symlinks in Argo CD

GHSA-63qx-x74g-jcr7 · CVE-2022-24348