tocsin

Go/github.com/argoproj/argo-cd/v2 CVE-2024-29893: unknown, EPSS 0.97%

Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

Action: Upgrade github.com/argoproj/argo-cd/v2 to 2.8.14 or later.

go get github.com/argoproj/argo-cd/v2@v2.8.14
go get github.com/argoproj/argo-cd/v2@v2.9.10
go get github.com/argoproj/argo-cd/v2@v2.10.5

Affected

introducedfixedlast affected
2.4.02.8.14-
2.9.02.9.10-
2.10.02.10.5-

Fixed versions

2.8.142.9.102.10.5

Sources

CVE-2024-29893 · published · modified · JSON