tocsin

CVE-2024-32476

3 advisories.

Go/github.com/argoproj/argo-cd/v2 CVE-2024-32476: medium 6.5, EPSS 1.00%

Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences

Action: Upgrade github.com/argoproj/argo-cd/v2 to 2.8.17 or later.

go get github.com/argoproj/argo-cd/v2@v2.10.8
go get github.com/argoproj/argo-cd/v2@v2.9.13
go get github.com/argoproj/argo-cd/v2@v2.8.17

Affected

introducedfixedlast affected
2.10.02.10.8-
2.9.02.9.13-
02.8.17-

Fixed versions

2.10.82.9.132.8.17

Sources

CVE-2024-32476 · published · modified · JSON

Go/github.com/argoproj/argo-cd CVE-2024-32476: unknown, EPSS 1.00%

Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2024-32476 · published · modified · JSON

Go/github.com/argoproj/argo-cd/v2 CVE-2024-32476: unknown, EPSS 1.00%

Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd

Action: Upgrade github.com/argoproj/argo-cd/v2 to 2.8.17 or later.

go get github.com/argoproj/argo-cd/v2@v2.8.17
go get github.com/argoproj/argo-cd/v2@v2.9.13
go get github.com/argoproj/argo-cd/v2@v2.10.8

Affected

introducedfixedlast affected
02.8.17-
2.9.02.9.13-
2.10.02.10.8-

Fixed versions

2.8.172.9.132.10.8

Sources

CVE-2024-32476 · published · modified · JSON