tocsin

Go/github.com/argoproj/argo-cd/v2 CVE-2024-31990: medium 4.8, EPSS 0.45%

Argo CD's API server does not enforce project sourceNamespaces

Action: Upgrade github.com/argoproj/argo-cd/v2 to 2.8.16 or later.

go get github.com/argoproj/argo-cd/v2@v2.8.16
go get github.com/argoproj/argo-cd/v2@v2.9.12
go get github.com/argoproj/argo-cd/v2@v2.10.7

Affected

introducedfixedlast affected
2.4.02.8.16-
2.9.02.9.12-
2.10.02.10.7-

Fixed versions

2.8.162.9.122.10.7

Sources

CVE-2024-31990 · published · modified · JSON