{"action":"Upgrade github.com/argoproj/argo-cd to 1.5.0-rc1 or later.","affected":[{"fixed":"1.5.0-rc1","introduced":"0"}],"component":"github.com/argoproj/argo-cd","cve_ids":["CVE-2018-21034"],"ecosystem":"Go","epss":0.01374,"exploited":false,"fixed_versions":["1.5.0-rc1"],"ghsa_id":"GHSA-xj7v-c82w-92q2","id":"tcs_01M5KFZS3R41236H94R1XZV0XA","modified_at":"2026-03-03T04:54:02.180728Z","published_at":"2024-08-20T20:31:38Z","references":["https://osv.dev/vulnerability/GO-2023-1952","https://github.com/advisories/GHSA-xj7v-c82w-92q2","https://nvd.nist.gov/vuln/detail/CVE-2018-21034","https://github.com/argoproj/argo-cd/commit/916d4aed5775fead4ab75f47c1d352cd0e73b815","https://github.com/argoproj/argo-cd/pull/3088","https://github.com/argoproj/argo-cd/issues/470","https://github.com/argoproj/argo-cd/blob/a1afe44066fcd0a0ab90a02a23177164bbad42cf/util/diff/diff.go#L399"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2023-1952","url":"https://osv.dev/vulnerability/GO-2023-1952"}],"summary":"Argo Exposure of Sensitive Information in github.com/argoproj/argo-cd"}