blob: 9c5422301b61ce344983daa199ea6be47f547cb9 [file] [log] [blame]
id: GO-2024-2667
modules:
- module: github.com/argoproj/argo-cd/v2
versions:
- introduced: 2.4.0
fixed: 2.8.14
- introduced: 2.9.0
fixed: 2.9.10
- introduced: 2.10.0
fixed: 2.10.5
vulnerable_at: 2.10.4
summary: Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2
cves:
- CVE-2024-29893
ghsas:
- GHSA-jhwx-mhww-rgc3
references:
- advisory: https://github.com/argoproj/argo-cd/security/advisories/GHSA-jhwx-mhww-rgc3
review_status: REVIEWED