{"action":"Upgrade github.com/redhat-developer/gitops-operator to 1.16.2 or later.","affected":[{"fixed":"1.16.2","introduced":"0"}],"component":"github.com/redhat-developer/gitops-operator","cve_ids":["CVE-2024-13484"],"ecosystem":"Go","epss":0.00224,"exploited":false,"fixed_versions":["1.16.2"],"ghsa_id":"GHSA-58fx-7v9q-3g56","id":"tcs_01M5KEY0ES533XXEM359FRNF7A","modified_at":"2026-07-21T15:15:51.495458485Z","published_at":"2025-01-28T18:31:28Z","references":["https://osv.dev/vulnerability/GHSA-58fx-7v9q-3g56","https://nvd.nist.gov/vuln/detail/CVE-2024-13484","https://github.com/redhat-developer/gitops-operator/pull/853","https://github.com/redhat-developer/gitops-operator/pull/867","https://github.com/redhat-developer/gitops-operator/pull/868","https://github.com/redhat-developer/gitops-operator/pull/869","https://github.com/redhat-developer/gitops-operator/pull/897","https://github.com/redhat-developer/gitops-operator/commit/bc6ac3e03d7c8b3db5d8f1770c868396a4c2dcef","https://access.redhat.com/errata/RHSA-2025:7753","https://access.redhat.com/errata/RHSA-2025:8274","https://access.redhat.com/errata/RHSA-2025:9506","https://access.redhat.com/security/cve/CVE-2024-13484","https://bugzilla.redhat.com/show_bug.cgi?id=2269376","https://github.com/argoproj/argo-cd","https://issues.redhat.com/browse/GITOPS-7037","https://pkg.go.dev/vuln/GO-2025-3427"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-58fx-7v9q-3g56","url":"https://osv.dev/vulnerability/GHSA-58fx-7v9q-3g56"}],"summary":"OpenShift GitOps Operator Namespace Isolation Break"}