Fluid Attacks Database

Description

Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
go	github.com/argoproj/argo-cd	-	-
go	github.com/argoproj/argo-cd/v2	>=2.4.0 <2.6.15 \|\| >=2.7.0 <2.7.14 \|\| >=2.8.0 <2.8.3	2.6.15, 2.7.14, 2.8.3

Aliases

1. CVE-2023-405842. NVD-2023-405843. OSV-GO-2023-20504. OSV-2023-405845. GHSA-g687-f2gx-6wm86. GCVE-2023-405847. GHSA-g687-f2gx-6wm8

References

1. https://github.com/argoproj/argo-cd/commit/1391ba72149655e4884d357586d3201f15bc92dc2. https://github.com/argoproj/argo-cd/commit/b8f92c4ff226346624f43de3f25d81dac63866743. https://github.com/argoproj/argo-cd/releases/tag/v2.6.154. https://github.com/argoproj/argo-cd/releases/tag/v2.7.145. https://github.com/argoproj/argo-cd/releases/tag/v2.8.36. https://github.com/argoproj/argo-cd/security/advisories/GHSA-g687-f2gx-6wm8