PkgSeer

Vulnerability GO-2026-5618

Unknown

3 months ago

Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd

v0.1.0 - v1.8.7

Summary

Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd

Details

Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd

References

ADVISORY — github.com

Related Vulnerabilities

Other vulnerabilities affecting the same packages

Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL

v3.0.0 - v3.3.14 and v3.4.0 - v3.4.9 and v3.5.0 - v3.5.3 and v3.6.0-rc1 GHSA-j6cw-g6p4-7hch

Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL

v3.0.0 - v3.3.14 and v3.4.0 - v3.4.9 and v3.5.0 - v3.5.3 and v3.6.0-rc1 GHSA-j6cw-g6p4-7hch

Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd

v3.0.0-rc1 - v3.2.11 GO-2026-5418

Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd

v3.0.0-rc1 - v3.2.11 GO-2026-5418

Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd

v3.0.0-rc1 - v3.2.11 GO-2026-5418

View all vulnerabilities for these packages

Impacted packages

Timeline

Published

3 months ago

Last Modified

2 months ago