{"action":"Upgrade github.com/argoproj/argo-cd to 2.3.14 or later.","affected":[{"fixed":"2.3.14","introduced":"1.8.2"},{"fixed":"2.4.20","introduced":"2.4.0"},{"fixed":"2.5.8","introduced":"2.5.0"},{"fixed":"2.6.0-rc5","introduced":"2.6.0-rc1"}],"component":"github.com/argoproj/argo-cd","cve_ids":["CVE-2023-22482"],"ecosystem":"Go","epss":0.00879,"exploited":false,"fixed_versions":["2.3.14","2.4.20","2.5.8","2.6.0-rc5"],"ghsa_id":"GHSA-q9hr-j4rf-8fjc","id":"tcs_01M5KFJS88EDG25G48W2N5QZ04","modified_at":"2026-09-10T03:49:51.491808297Z","published_at":"2023-01-25T22:02:52Z","references":["https://osv.dev/vulnerability/GHSA-q9hr-j4rf-8fjc","https://github.com/argoproj/argo-cd/security/advisories/GHSA-q9hr-j4rf-8fjc","https://nvd.nist.gov/vuln/detail/CVE-2023-22482","https://github.com/argoproj/argo-cd"],"severity":{"label":"critical","score":9},"sources":[{"source":"osv","source_id":"GHSA-q9hr-j4rf-8fjc","url":"https://osv.dev/vulnerability/GHSA-q9hr-j4rf-8fjc"}],"summary":"JWT audience claim is not verified"}