tocsin

CVE-2023-22736

3 advisories.

Go/github.com/argoproj/argo-cd/v2 CVE-2023-22736: high 8.5

Controller reconciles apps outside configured namespaces when sharding is enabled

Action: Upgrade github.com/argoproj/argo-cd/v2 to 2.5.8 or later.

go get github.com/argoproj/argo-cd/v2@v2.5.8
go get github.com/argoproj/argo-cd/v2@v2.6.0-rc5

Affected

introducedfixedlast affected
2.5.0-rc12.5.8-
2.6.0-rc42.6.0-rc5-

Fixed versions

2.5.82.6.0-rc5

Sources

CVE-2023-22736 · published · modified · JSON

Go/github.com/argoproj/argo-cd CVE-2023-22736: unknown

Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2023-22736 · published · modified · JSON

Go/github.com/argoproj/argo-cd/v2 CVE-2023-22736: unknown

Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

Action: Upgrade github.com/argoproj/argo-cd/v2 to 2.5.8 or later.

go get github.com/argoproj/argo-cd/v2@v2.5.8
go get github.com/argoproj/argo-cd/v2@v2.6.0-rc5

Affected

introducedfixedlast affected
2.5.0-rc12.5.8-
2.6.0-rc42.6.0-rc5-

Fixed versions

2.5.82.6.0-rc5

Sources

CVE-2023-22736 · published · modified · JSON