PkgSeer

Vulnerabilities

Last updated 3 hours ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
github.com/argoproj/argo-cd/v3 ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction Critical 9.6 5 months ago 6 hours ago
github.com/argoproj/argo-cd/v3 Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL High Risk 8.8 11 days ago 6 hours ago
github.com/argoproj/argo-cd/v3 Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks Critical 9.9 5 days ago 22 hours ago
github.com/argoproj/argo-cd/v3 Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd Unknown 1 day ago 22 hours ago
github.com/argoproj/argo-cd/v3 Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd Unknown 1 day ago 1 day ago
github.com/argoproj/argo-cd/v3 Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation High Risk 7.3 5 months ago 1 month ago
github.com/argoproj/argo-cd/v3 Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations Medium Risk 6.3 5 months ago 1 month ago
github.com/argoproj/argo-cd/v3 Argo CD's Project API Token Exposes Repository Credentials Critical 9.9 1 year ago 1 month ago
github.com/argoproj/argo-cd/v3 Argo CD allows cross-site scripting on repositories page Critical 9.0 1 year ago 1 month ago
github.com/argoproj/argo-cd/v3 Repository Credentials Race Condition Crashes Argo CD Server Medium Risk 6.5 1 year ago 1 month ago
github.com/argoproj/argo-cd/v3 Repository Credentials Race Condition Crashes Argo CD Server in github.com/argoproj/argo-cd Unknown 12 months ago 1 month ago
github.com/argoproj/argo-cd/v3 Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd Unknown 3 months ago 3 months ago
github.com/argoproj/argo-cd/v3 Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd Unknown 3 months ago 3 months ago
github.com/argoproj/argo-cd/v3 ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction in github.com/argoproj/argo-cd Unknown 3 months ago 3 months ago
github.com/argoproj/argo-cd/v3 Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload in github.com/argoproj/argo-cd Unknown 12 months ago 6 months ago
github.com/argoproj/argo-cd/v3 argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd Unknown 12 months ago 6 months ago
github.com/argoproj/argo-cd/v3 Argo CD's Project API Token Exposes Repository Credentials in github.com/argoproj/argo-cd Unknown 1 year ago 8 months ago
github.com/argoproj/argo-cd/v3 Argo CD allows cross-site scripting on repositories page in github.com/argoproj/argo-cd Unknown 1 year ago 8 months ago
github.com/argoproj/argo-cd/v3 Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook High Risk 7.5 1 year ago 12 months ago
github.com/argoproj/argo-cd/v3 argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload High Risk 7.5 1 year ago 12 months ago
github.com/argoproj/argo-cd/v3 Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload High Risk 7.5 1 year ago 12 months ago
github.com/argoproj/argo-cd/v3 Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook in github.com/argoproj/argo-cd Unknown 12 months ago 12 months ago
Data courtesy of OSV.dev
Page 1