CVE-2023-22482

Go/github.com/argoproj/argo-cd CVE-2023-22482: critical 9

JWT audience claim is not verified

Action: Upgrade github.com/argoproj/argo-cd to 2.3.14 or later.

go get github.com/argoproj/argo-cd@v2.3.14

go get github.com/argoproj/argo-cd@v2.4.20

go get github.com/argoproj/argo-cd@v2.5.8

go get github.com/argoproj/argo-cd@v2.6.0-rc5

Affected

Fixed versions

Sources

• osv: GHSA-q9hr-j4rf-8fjc
• https://github.com/argoproj/argo-cd/security/advisories/GHSA-q9hr-j4rf-8fjc
• https://nvd.nist.gov/vuln/detail/CVE-2023-22482
• https://github.com/argoproj/argo-cd

CVE-2023-22482 · published 2023-01-25T22:02:52Z · modified 2026-09-10T03:49:51.491808297Z · JSON

Go/github.com/argoproj/argo-cd CVE-2023-22482: unknown

JWT audience claim is not verified in github.com/argoproj/argo-cd

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2023-1520
• https://github.com/argoproj/argo-cd/security/advisories/GHSA-q9hr-j4rf-8fjc
• https://nvd.nist.gov/vuln/detail/CVE-2023-22482

CVE-2023-22482 · published 2024-08-20T20:26:01Z · modified 2026-03-03T04:53:15.633345Z · JSON

Go/github.com/argoproj/argo-cd/v2 CVE-2023-22482: unknown

JWT audience claim is not verified in github.com/argoproj/argo-cd

Action: Upgrade github.com/argoproj/argo-cd/v2 to 2.3.14 or later.

go get github.com/argoproj/argo-cd/v2@v2.3.14

go get github.com/argoproj/argo-cd/v2@v2.4.20

go get github.com/argoproj/argo-cd/v2@v2.5.8

go get github.com/argoproj/argo-cd/v2@v2.6.0-rc5

Affected

Fixed versions

Sources

• osv: GO-2023-1520#Go/github.com/argoproj/argo-cd/v2
• https://github.com/argoproj/argo-cd/security/advisories/GHSA-q9hr-j4rf-8fjc
• https://nvd.nist.gov/vuln/detail/CVE-2023-22482

CVE-2023-22482 · published 2024-08-20T20:26:01Z · modified 2026-03-03T04:53:15.633345Z · JSON