tocsin

Go/github.com/argoproj/argo-cd/v2 CVE-2023-40025: unknown, EPSS 0.57%

Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd

Action: Upgrade github.com/argoproj/argo-cd/v2 to 2.6.14 or later.

go get github.com/argoproj/argo-cd/v2@v2.6.14
go get github.com/argoproj/argo-cd/v2@v2.7.12
go get github.com/argoproj/argo-cd/v2@v2.8.1

Affected

introducedfixedlast affected
2.6.02.6.14-
2.7.02.7.12-
2.8.02.8.1-

Fixed versions

2.6.142.7.122.8.1

Sources

CVE-2023-40025 · published · modified · JSON