tocsin

Go/github.com/argoproj/argo-cd CVE-2023-22482: critical 9, EPSS 0.88%

JWT audience claim is not verified

Action: Upgrade github.com/argoproj/argo-cd to 2.3.14 or later.

go get github.com/argoproj/argo-cd@v2.3.14
go get github.com/argoproj/argo-cd@v2.4.20
go get github.com/argoproj/argo-cd@v2.5.8
go get github.com/argoproj/argo-cd@v2.6.0-rc5

Affected

introducedfixedlast affected
1.8.22.3.14-
2.4.02.4.20-
2.5.02.5.8-
2.6.0-rc12.6.0-rc5-

Fixed versions

2.3.142.4.202.5.82.6.0-rc5

Sources

CVE-2023-22482 · published · modified · JSON