Known vulnerabilities in Argo CD 0.4.0-alpha1

Vendor: Argo
Software: Argo CD
Version: 0.4.0-alpha1
Software CPE: cpe:2.3:a:argo:argo-cd:*:*:*:*:*:kubernetes:*:*
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Argo CD version 0.4.0-alpha1 Argo CD 0.4.0-alpha1 is affected by 3 vulnerabilities: 2 medium, 1 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU94676 - Resource exhaustion
CVE-2024-40634
CWE-400 Medium
No
No
2.9.20, 2.10.15, 2.11.6 23.07.2024 SB2024072331
SB2024072701
SB2024080205
and 1 more
#VU87525 - Improper Access Control
CVE-2023-50726
CWE-284 Medium
No
No
2.8.12, 2.9.8, 2.10.3 14.03.2024 SB2024031428
SB2024042564
SB2024042565
and 2 more
#VU85634 - Cross-Site Request Forgery (CSRF)
CVE-2024-22424
CWE-352 Low
No
No
2.7.16, 2.8.8, 2.9.4, 2.10.0 rc2 22.01.2024 SB2024012212