argocd-3.0-compat

Direct Vulnerabilities

Known vulnerabilities in the argocd-3.0-compat package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • L
CVE-2024-7598

*
  • L
Out-of-Bounds

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

<3.0.20-r1
  • M
CVE-2025-47911

<3.0.20-r1
  • L
Deserialization of Untrusted Data

*
  • L
Improper Verification of Cryptographic Signature

*
  • L
Improper Restriction of Rendered UI Layers or Frames

*
  • L
CVE-2026-39824

*
  • L
Improper Certificate Validation

*
  • L
Resource Exhaustion

*
  • L
Incorrect Type Conversion or Cast

*
  • L
Use of a Broken or Risky Cryptographic Algorithm

*
  • L
Improper Restriction of Rendered UI Layers or Frames

*
  • L
CVE-2026-42504

*
  • M
Use of a Broken or Risky Cryptographic Algorithm

*
  • L
CVE-2026-46598

*
  • L
Reachable Assertion

<3.0.20-r1
  • L
Missing Authorization

*
  • L
Cross-site Scripting (XSS)

*
  • L
CVE-2026-39821

*
  • L
CVE-2026-42507

*
  • L
Integer Overflow or Wraparound

*
  • L
Improper Certificate Validation

*
  • L
Improper Restriction of Rendered UI Layers or Frames

*
  • L
CVE-2026-27145

*
  • L
Improper Enforcement of Message Integrity During Transmission in a Communication Channel

*
  • L
Missing Authorization

*
  • L
CVE-2026-46595

*
  • L
Improper Certificate Validation

*
  • L
Time-of-check Time-of-use (TOCTOU)

*
  • L
Directory Traversal

*
  • L
Directory Traversal

*
  • L
GHSA-w5pp-99ch-qj29

*
  • H
Incorrect Behavior Order: Validate Before Canonicalize

*
  • L
CVE-2026-45738

*
  • C
Improper Encoding or Escaping of Output

*
  • L
GHSA-gxhx-2686-5h9g

*
  • L
Uncontrolled Recursion

*
  • H
NULL Pointer Dereference

<3.0.23-r11
  • M
Link Following

<3.0.23-r11
  • M
Out-of-bounds Write

<3.0.23-r11
  • L
Cross-site Scripting (XSS)

<3.0.23-r11
  • L
Improper Encoding or Escaping of Output

<3.0.23-r11
  • L
CVE-2026-42499

<3.0.23-r11
  • H
Double Free

<3.0.23-r11
  • L
CVE-2026-42501

<3.0.23-r11
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<3.0.23-r11
  • L
CVE-2026-39825

<3.0.23-r11
  • H
Allocation of Resources Without Limits or Throttling

<3.0.23-r11
  • L
Allocation of Resources Without Limits or Throttling

<3.0.23-r9
  • C
CVE-2026-27143

<3.0.23-r9
  • L
GHSA-3xc5-wrhm-f963

<3.0.23-r10
  • H
Access of Resource Using Incompatible Type ('Type Confusion')

<3.0.23-r9
  • L
Allocation of Resources Without Limits or Throttling

<3.0.23-r10
  • M
Link Following

<3.0.23-r9
  • M
Cross-site Scripting (XSS)

<3.0.23-r9
  • M
Allocation of Resources Without Limits or Throttling

<3.0.23-r9
  • H
Improper Certificate Validation

<3.0.23-r9
  • L
CVE-2026-32280

<3.0.23-r9
  • H
Incorrect Authorization

<3.0.23-r9
  • H
Improper Certificate Validation

<3.0.23-r9
  • H
Allocation of Resources Without Limits or Throttling

<3.0.23-r9
  • H
Untrusted Search Path

<3.0.23-r9
  • L
Uncaught Exception

<3.0.23-r8
  • L
Integer Underflow

<3.0.23-r7
  • L
Improper Validation of Array Index

<3.0.23-r7
  • L
Improper Authorization

<3.0.23-r6
  • L
Cross-site Scripting (XSS)

<3.0.23-r5
  • L
Directory Traversal

<3.0.23-r5
  • L
Direct Request ('Forced Browsing')

<3.0.23-r5
  • L
Improper Certificate Validation

<3.0.23-r5
  • L
Improper Certificate Validation

<3.0.23-r5
  • L
Untrusted Search Path

<3.0.23-r4
  • C
CVE-2026-1229

<3.0.23-r3
  • M
Improper Validation of Integrity Check Value

<3.0.23-r2
  • L
CVE-2025-61732

<3.0.23-r1
  • C
CVE-2025-68121

<3.0.23-r1
  • L
CVE-2025-61730

<3.0.23-r0
  • L
Out-of-bounds Write

<3.0.23-r0
  • L
CVE-2025-61731

<3.0.23-r0
  • L
Allocation of Resources Without Limits or Throttling

<3.0.23-r0
  • L
Allocation of Resources Without Limits or Throttling

<3.0.23-r0
  • L
CVE-2025-13281

<3.0.20-r5
  • L
Allocation of Resources Without Limits or Throttling

<3.0.20-r5
  • L
Improper Certificate Validation

<3.0.20-r2
  • L
Improper Certificate Validation

<3.0.20-r2
  • L
CVE-2025-47914

<3.0.20-r1
  • L
CVE-2025-58181

<3.0.20-r1
  • L
Information Exposure Through Log Files

<3.0.20-r0
  • L
CVE-2025-61725

<3.0.20-r0
  • L
CVE-2025-58183

<3.0.20-r0
  • L
Improper Certificate Validation

<3.0.20-r0
  • L
CVE-2025-47912

<3.0.20-r0
  • L
Allocation of Resources Without Limits or Throttling

<3.0.20-r0
  • L
Allocation of Resources Without Limits or Throttling

<3.0.20-r0
  • L
Allocation of Resources Without Limits or Throttling

<3.0.20-r0
  • L
Algorithmic Complexity

<3.0.20-r0
  • L
CVE-2025-58186

<3.0.20-r0
  • M
Race Condition

<3.0.19-r0
  • L
NULL Pointer Dereference

<3.0.19-r0
  • L
Information Exposure

<3.0.15-r0
  • L
CVE-2025-5187

<3.0.13-r1
  • L
Uncaught Exception

<3.0.19-r0
  • L
Allocation of Resources Without Limits or Throttling

<3.0.11-r1
  • L
Improper Validation of Specified Type of Input

<3.0.11-r1
  • L
CVE-2025-4563

<3.0.11-r1
  • L
Improper Check or Handling of Exceptional Conditions

<3.0.19-r0
  • L
CVE-2025-47906

<3.0.12-r1
  • L
CVE-2025-1767

<3.0.11-r1
  • L
CVE-2025-47910

<3.0.15-r0
  • L
Race Condition

<3.0.12-r1