Vulnerabilidades en argoproj
74 resultadosCVE-2025-59538HIGHArgo CD is Vulnerable to Unauthenticated Remote DoS via malformed Azure DevOps git.push webhookEPSS 9.4%CVE-2025-55190CRITICALArgo CD: Project API Token Exposes Repository CredentialsEPSS 5.7%CVE-2024-37152MEDIUMUnauthenticated Access to sensitive settings in Argo CDEPSS 2.3%CVE-2022-29165CRITICALArgo CD will blindly trust JWT claims if anonymous access is enabledEPSS 2.1%CVE-2026-55797HIGHArgo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URLEPSS 1.9%CVE-2022-31054HIGHUses of deprecated API can be used to cause DoS in user-facing endpoints in Argo EventsEPSS 1.6%CVE-2024-31989CRITICALArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis CacheEPSS 1.5%CVE-2023-40584MEDIUMDenial of Service to Argo CD repo-server EPSS 1.4%CVE-2024-40634HIGHArgo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook EndpointEPSS 1.4%CVE-2022-24905MEDIUMArgo CD login screen allows message spoofing if SSO is enabledEPSS 1.3%CVE-2022-24768CRITICALImproper access control allows admin privilege escalation in Argo CDEPSS 1.3%CVE-2023-40029CRITICALCluster secret might leak in cluster details page in Argo CDEPSS 1.2%CVE-2024-21661HIGHArgo CD Denial of Service (DoS) Vulnerability Due to Unsafe Array Modification in Multi-threaded EnvironmentEPSS 1.2%CVE-2022-24904MEDIUMSymlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-serverEPSS 1.2%CVE-2024-32476MEDIUMDenial of Service via malicious jqPathExpressions in ignoreDifferencesEPSS 1.0%CVE-2022-31035CRITICALExternal URLs for Deployments can include javascript in argo-cdEPSS 1.0%CVE-2024-29893MEDIUMUncontrolled Resource Consumption vulnerability in ArgoCD's repo serverEPSS 1.0%CVE-2022-31034HIGHInsecure entropy in argo-cdEPSS 1.0%CVE-2022-24731MEDIUMPath traversal allows leaking out-of-bound files from Argo CD repo-serverEPSS 1.0%CVE-2022-29164HIGHPrivilege Escalation in argo-workflowsEPSS 0.9%