tocsin

Go/github.com/argoproj/argo-cd/v2 CVE-2023-50726: medium 6.4, EPSS 0.53%

Users with `create` but not `override` privileges can perform local sync

Action: Upgrade github.com/argoproj/argo-cd/v2 to 2.8.12 or later.

go get github.com/argoproj/argo-cd/v2@v2.9.8
go get github.com/argoproj/argo-cd/v2@v2.10.3
go get github.com/argoproj/argo-cd/v2@v2.8.12

Affected

introducedfixedlast affected
2.9.02.9.8-
2.10.02.10.3-
2.0.0-rc32.8.12-

Fixed versions

2.9.82.10.32.8.12

Sources

CVE-2023-50726 · published · modified · JSON