Go/github.com/argoproj/argo-cd CVE-2024-22424: high 8.3, EPSS 0.48%

github.com/argoproj/argo-cd Cross-Site Request Forgery vulnerability

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-92mw-q256-5vwg
• https://github.com/argoproj/argo-cd/security/advisories/GHSA-92mw-q256-5vwg
• https://nvd.nist.gov/vuln/detail/CVE-2024-22424
• https://github.com/argoproj/argo-cd/issues/2496
• https://github.com/argoproj/argo-cd/pull/16860
• https://github.com/argoproj/argo-cd/commit/0b459f224b3186707809be8240dfc3a6028f42a0
• https://github.com/argoproj/argo-cd/commit/13fe3ca589f6f2ded6001ce114e354602ed058b3
• https://github.com/argoproj/argo-cd/commit/3c5878ecf41581942281e9c95745f073bdfbf9c3
• https://github.com/argoproj/argo-cd/commit/f569aa105e0fe5940bc736c68e2fc90ee4a6ed94
• https://github.com/argoproj/argo-cd

CVE-2024-22424 · published 2024-01-19T20:37:53Z · modified 2026-09-10T03:50:09.284977620Z · JSON