İçeriğe atla
Noroxi

argoproj kayıtları

argoproj üreticisine ait 75 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%90,7
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 20
  2. 21
  3. 22
  4. 23
  5. 24
  6. 25
  7. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

75 kayıt
  • CVE-2025-55190
    41Planlayın

    Argo CD: Project API Token Exposes Repository Credentials

    KritikCVSS 9,9Kavram kanıtıEPSS %5

    argoproj · argo cd4 Eyl 2025

  • CVE-2022-29165
    41Planlayın

    Argo CD will blindly trust JWT claims if anonymous access is enabled

    KritikCVSS 10,0İstismar yokEPSS %2

    argoproj · argo cd20 May 2022

  • CVE-2024-21652
    39İzleyin

    Argo CD vulnerable to Bypassing of Brute Force Protection via Application Crash and In-Memory Data Loss

    KritikCVSS 9,8İstismar yokEPSS %0

    argoproj · argo cd18 Mar 2024

  • CVE-2023-40029
    38İzleyin

    Cluster secret might leak in cluster details page in Argo CD

    KritikCVSS 9,6Kavram kanıtıEPSS %1

    argoproj · argo cd7 Eyl 2023

  • CVE-2022-31105
    38İzleyin

    Argo CD's certificate verification is skipped for connections to OIDC providers

    KritikCVSS 9,6İstismar yokEPSS %0

    argoproj · argo cd12 Tem 2022

  • CVE-2026-42880
    38İzleyin

    ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction

    KritikCVSS 9,6Kavram kanıtıEPSS %0

    argoproj · argo cd7 May 2026

  • CVE-2020-8828
    36İzleyin

    As of v1.5.0, the default admin password is set to the argocd-server pod name.

    YüksekCVSS 8,8İstismar yokEPSS %1

    argoproj · argo cd8 Nis 2020

  • CVE-2024-31989
    36İzleyin

    ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache

    KritikCVSS 9,0Kavram kanıtıEPSS %1

    argoproj · argo cd21 May 2024

  • CVE-2024-21662
    36İzleyin

    Argo CD vulnerable to Bypassing of Rate Limit and Brute Force Protection Using Cache Overflow

    KritikCVSS 9,1İstismar yokEPSS %0

    argoproj · argo cd18 Mar 2024

  • CVE-2022-1025
    35İzleyin

    All unpatched versions of Argo CD starting with v1.0.0 are vulnerable to an improper access control bug, allowing a malicious user to potent

    YüksekCVSS 8,8İstismar yokEPSS %1

    argoproj · argo cd12 Tem 2022

  • CVE-2022-24768
    35İzleyin

    Improper access control allows admin privilege escalation in Argo CD

    YüksekCVSS 8,8İstismar yokEPSS %1

    argoproj · argo cd23 Mar 2022

  • CVE-2023-22482
    35İzleyin

    JWT audience claim is not verified

    YüksekCVSS 8,8İstismar yokEPSS %0

    argoproj · argo cd26 Oca 2023

  • CVE-2026-31892
    35İzleyin

    WorkflowTemplate Security Bypass via podSpecPatch in Strict/Secure Reference Mode

    YüksekCVSS 8,9İstismar yokEPSS %0

    argoproj · argo workflows11 Mar 2026

  • CVE-2025-62156
    35İzleyin

    argo-workflows Zip Slip path traversal allows arbitrary file write and container configuration overwrite

    YüksekCVSS 8,8İstismar yokEPSS %0

    argoproj · argo workflows14 Eki 2025

  • CVE-2026-54526
    35İzleyin

    Argo Workflows: Incomplete fix for CVE-2026-31892: ArtifactGC.PodSpecPatch bypass of Strict/Secure templateReferencing

    YüksekCVSS 8,9İstismar yokEPSS %0

    argoproj · argo workflows16 Tem 2026

  • CVE-2023-22736
    34İzleyin

    argo-cd Controller reconciles apps outside configured namespaces when sharding is enabled

    YüksekCVSS 8,5İstismar yokEPSS %0

    argoproj · argo cd26 Oca 2023

  • CVE-2023-23947
    34İzleyin

    Argo CD users with any cluster secret update access may update out-of-bounds cluster secrets

    YüksekCVSS 8,5İstismar yokEPSS %0

    argoproj · argo cd16 Şub 2023

  • CVE-2026-45738
    34İzleyin

    Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation

    YüksekCVSS 8,7İstismar yokEPSS %0

    argoproj · argo cd15 Tem 2026

  • CVE-2026-42297
    34İzleyin

    Argo Workflows Is Missing Authorization in Sync ConfigMap Provider

    YüksekCVSS 8,5İstismar yokEPSS %0

    argoproj · argo workflows9 May 2026

  • CVE-2025-62157
    34İzleyin

    Argo Workflows exposes artifact repository credentials in workflow-controller logs

    YüksekCVSS 8,5İstismar yokEPSS %0

    argoproj · argo workflows14 Eki 2025

  • CVE-2026-42295
    34İzleyin

    Argo Workflows: Exposure of artifact repository credentials

    YüksekCVSS 8,5İstismar yokEPSS %0

    argoproj · argo workflows9 May 2026

  • CVE-2025-59538
    33İzleyin

    Argo CD is Vulnerable to Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook

    YüksekCVSS 7,5İstismar yokEPSS %8

    argoproj · argo cd1 Eki 2025

  • CVE-2024-22424
    33İzleyin

    Cross-Site Request Forgery (CSRF) in github.com/argoproj/argo-cd

    YüksekCVSS 8,3İstismar yokEPSS %0

    argoproj · argo cd18 Oca 2024

  • CVE-2022-31034
    32İzleyin

    Insecure entropy in argo-cd

    YüksekCVSS 8,1İstismar yokEPSS %0

    argoproj · argo cd27 Haz 2022

  • CVE-2026-42294
    32İzleyin

    Argo Workflows: Unauthenticated Memory Exhaustion (DoS) in Webhook Interceptor

    YüksekCVSS 8,2İstismar yokEPSS %0

    argoproj · argo workflows9 May 2026