Advisories · Technology
argoproj argo-cd.
Every CVE that names argoproj argo-cd among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.9 CriticalCritical · CVSS 9+
Argo CD: A Kustomize Helm config home can run commands in the repo-server
- argoproj argo-cd
- CWE-829
- CVSS 9.9 CriticalCritical · CVSS 9+
Argo CD: A Kustomize remote ref can run commands in the repo-server
- argoproj argo-cd
- Command injection
- CVSS 9.9 CriticalCritical · CVSS 9+
Argo CD: A Jsonnet import can read files from the repo-server
- argoproj argo-cd
- Path traversal