tocsin

Go/github.com/argoproj/argo-cd/v2 CVE-2024-28175: critical 9, EPSS 0.65%

Cross-site scripting on application summary component

Action: Upgrade github.com/argoproj/argo-cd/v2 to 2.8.12 or later.

go get github.com/argoproj/argo-cd/v2@v2.9.8
go get github.com/argoproj/argo-cd/v2@v2.10.3
go get github.com/argoproj/argo-cd/v2@v2.8.12

Affected

introducedfixedlast affected
2.9.02.9.8-
2.10.02.10.3-
2.0.02.8.12-

Fixed versions

2.9.82.10.32.8.12

Sources

CVE-2024-28175 · published · modified · JSON