{"action":"Upgrade github.com/argoproj/argo-cd to 1.5.0-rc1 or later.","affected":[{"fixed":"1.5.0-rc1","introduced":"0"}],"component":"github.com/argoproj/argo-cd","cve_ids":["CVE-2018-21034"],"ecosystem":"Go","epss":0.01374,"exploited":false,"fixed_versions":["1.5.0-rc1"],"ghsa_id":"GHSA-xj7v-c82w-92q2","id":"tcs_01M5KFSCDNWGSBFZ4D1KG08N8E","modified_at":"2024-08-20T20:58:48.069573Z","published_at":"2022-05-24T17:13:55Z","references":["https://osv.dev/vulnerability/GHSA-xj7v-c82w-92q2","https://nvd.nist.gov/vuln/detail/CVE-2018-21034","https://github.com/argoproj/argo-cd/issues/470","https://github.com/argoproj/argo-cd/pull/3088","https://github.com/argoproj/argo-cd/commit/916d4aed5775fead4ab75f47c1d352cd0e73b815","https://github.com/argoproj/argo-cd","https://github.com/argoproj/argo-cd/blob/a1afe44066fcd0a0ab90a02a23177164bbad42cf/util/diff/diff.go#L399","https://www.soluble.ai/blog/argo-cves-2020"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-xj7v-c82w-92q2","url":"https://osv.dev/vulnerability/GHSA-xj7v-c82w-92q2"}],"summary":"Argo Exposure of Sensitive Information"}