CVE-2023-23947

3 advisories.

Go/github.com/argoproj/argo-cd CVE-2023-23947: critical 9.1

Users with any cluster secret update access may update out-of-bounds cluster secrets

Action: Upgrade github.com/argoproj/argo-cd to 2.3.17 or later.

go get github.com/argoproj/argo-cd@v2.3.17

go get github.com/argoproj/argo-cd@v2.4.23

go get github.com/argoproj/argo-cd@v2.5.11

go get github.com/argoproj/argo-cd@v2.6.2

2.3.17

2.4.23

2.5.11

2.6.2

CVE-2023-23947 · published 2023-02-16T20:47:25Z · modified 2026-09-10T03:49:56.567420152Z · JSON

Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

Action: No fix published. Pin and monitor.

introduced	fixed	last affected
0	-	-

No fixed version in the source.

CVE-2023-23947 · published 2024-08-20T20:26:01Z · modified 2026-03-03T04:53:22.602654Z · JSON