Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-26923
7.5
HIGHCVSS v3
Published
March 15, 2021
CVSS v2
5 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
An issue was discovered in Argo CD before 1.8.4. Accessing the endpoint /api/version leaks internal information for the system, and this endpoint is not protected with authentication.
argoproj/argo-cd
GitHubDeclarative Continuous Deployment for Kubernetes
GitHubDeclarative Continuous Deployment for Kubernetes= *, >= 1.8.0, < 1.8.4, < 1.7.12NVD