argocd-image-updater icon indicating copy to clipboard operation
argocd-image-updater copied to clipboard

Published 20 hours ago • verified publisher icon argoproj-labs

Vulnerability on argoproj-labs project

Open ankitdn opened this issue 6 months ago • 1 comments

While working with the argoproj-lab project, this vulnerability was identified in the use of Argo CD (this dependency used by argoproj-lab). The vulnerability stems from inadequate filtering of user-inputted URLs, allowing the injection of malicious javascript: protocol handlers. This issue affects users who can edit repository configurations within Argo CD.

CVE Link CVE Report

ankitdn avatar May 29 '25 13:05 ankitdn