tocsin

Go/github.com/argoproj/argo-cd/v2 CVE-2023-22482: unknown, EPSS 0.88%

JWT audience claim is not verified in github.com/argoproj/argo-cd

Action: Upgrade github.com/argoproj/argo-cd/v2 to 2.3.14 or later.

go get github.com/argoproj/argo-cd/v2@v2.3.14
go get github.com/argoproj/argo-cd/v2@v2.4.20
go get github.com/argoproj/argo-cd/v2@v2.5.8
go get github.com/argoproj/argo-cd/v2@v2.6.0-rc5

Affected

introducedfixedlast affected
02.3.14-
2.4.02.4.20-
2.5.02.5.8-
2.6.0-rc12.6.0-rc5-

Fixed versions

2.3.142.4.202.5.82.6.0-rc5

Sources

CVE-2023-22482 · published · modified · JSON