Vulnerabilities > Argoproj > Argo CD > 0.4.5

DATE CVE VULNERABILITY TITLE RISK
2024-05-21 CVE-2024-31989 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Argoproj Argo CD
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.
low complexity
argoproj CWE-327
critical
9.0
2024-03-18 CVE-2024-21661 Unspecified vulnerability in Argoproj Argo CD
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.
network
low complexity
argoproj
7.5
2024-03-18 CVE-2024-21662 Improper Restriction of Excessive Authentication Attempts vulnerability in Argoproj Argo CD
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.
network
low complexity
argoproj CWE-307
critical
9.1
2024-03-18 CVE-2024-21652 Improper Restriction of Excessive Authentication Attempts vulnerability in Argoproj Argo CD
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.
network
low complexity
argoproj CWE-307
critical
9.8
2023-09-27 CVE-2023-40026 Unspecified vulnerability in Argoproj Argo CD
Argo CD is a declarative continuous deployment framework for Kubernetes.
network
low complexity
argoproj
4.3
2022-02-16 CVE-2021-3557 Incorrect Permission Assignment for Critical Resource vulnerability in multiple products
A flaw was found in argocd.
network
low complexity
argoproj redhat CWE-732
6.5
2022-02-04 CVE-2022-24348 Path Traversal vulnerability in Argoproj Argo CD
Argo CD before 2.1.9 and 2.2.x before 2.2.4 allows directory traversal related to Helm charts because of an error in helmTemplate in repository.go.
network
low complexity
argoproj CWE-22
7.7
2021-03-15 CVE-2021-26924 Cross-site Scripting vulnerability in Argoproj Argo CD
An issue was discovered in Argo CD before 1.8.4.
network
low complexity
argoproj CWE-79
6.1
2021-03-15 CVE-2021-26923 Information Exposure vulnerability in Argoproj Argo CD
An issue was discovered in Argo CD before 1.8.4.
network
low complexity
argoproj CWE-200
7.5
2021-03-03 CVE-2021-23347 Cross-site Scripting vulnerability in Argoproj Argo CD
The package github.com/argoproj/argo-cd/cmd before 1.7.13, from 1.8.0 and before 1.8.6 are vulnerable to Cross-site Scripting (XSS) the SSO provider connected to Argo CD would have to send back a malicious error message containing JavaScript to the user.
network
low complexity
argoproj CWE-79
4.8