tocsin

Go/github.com/argoproj/argo-cd/v2 CVE-2024-28175: unknown, EPSS 0.65%

Cross-site scripting on application summary component in github.com/argoproj/argo-cd/v2

Action: Upgrade github.com/argoproj/argo-cd/v2 to 2.8.12 or later.

go get github.com/argoproj/argo-cd/v2@v2.8.12
go get github.com/argoproj/argo-cd/v2@v2.9.8
go get github.com/argoproj/argo-cd/v2@v2.10.3

Affected

introducedfixedlast affected
2.0.02.8.12-
2.9.02.9.8-
2.10.02.10.3-

Fixed versions

2.8.122.9.82.10.3

Sources

CVE-2024-28175 · published · modified · JSON