Vulnerabilidades en argoproj
74 resultadosCVE-2023-22482CRITICALJWT audience claim is not verifiedEPSS 0.9%CVE-2022-31016MEDIUMArgo CD vulnerable to Uncontrolled Memory ConsumptionEPSS 0.9%CVE-2022-24730HIGHPath traversal and improper access control allows leaking out-of-bound files from Argo CD repo-serverEPSS 0.9%CVE-2022-31036MEDIUMSymlink following allows leaking out-of-bounds YAML files from Argo CD repo-serverEPSS 0.9%CVE-2023-25163MEDIUMArgo CD leaks repository credentials in user-facing error messages and in logsEPSS 0.8%CVE-2024-21662HIGHArgo CD vulnerable to Bypassing of Rate Limit and Brute Force Protection Using Cache OverflowEPSS 0.8%CVE-2026-113672CRITICALArgo CD: A Jsonnet import can read files from the repo-serverEPSS 0.8%CVE-2022-31105HIGHArgo CD's certificate verification is skipped for connections to OIDC providersEPSS 0.8%CVE-2023-22736HIGHargo-cd Controller reconciles apps outside configured namespaces when sharding is enabledEPSS 0.8%CVE-2025-32445CRITICALUsers can gain privileged access to the host system and cluster with EventSource and Sensor CREPSS 0.8%CVE-2026-82277CRITICALArgo Rollouts Dashboard Unauthenticated Mutating OperationsEPSS 0.8%CVE-2024-21652CRITICALArgo CD vulnerable to Bypassing of Brute Force Protection via Application Crash and In-Memory Data LossEPSS 0.8%CVE-2026-28229CRITICALArgo Workflows has unauthorized access to Argo Workflows TemplateEPSS 0.7%CVE-2024-41666MEDIUMThe Argo CD web terminal session does not handle the revocation of user permissions properly.EPSS 0.7%CVE-2025-66626HIGHargoproj/argo-workflows is vulnerable to RCE via ZipSlip and symbolic linksEPSS 0.7%CVE-2023-23947CRITICALArgo CD users with any cluster secret update access may update out-of-bounds cluster secretsEPSS 0.7%CVE-2026-113708CRITICALArgo CD: A Kustomize remote ref can run commands in the repo-serverEPSS 0.7%CVE-2024-53862MEDIUMArgo Workflows Allows Access to Archived Workflows with Fake Token in `client` modeEPSS 0.7%CVE-2024-28175CRITICALCross-site scripting on application summary component in argo-cdEPSS 0.7%CVE-2026-42880CRITICALArgoCD ServerSideDiff is vulnerable to Kubernetes Secret ExtractionEPSS 0.6%