Skip to content
fr Sign in
6.5 Medium

CVE-2024-32476 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes

Description

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. There is a Denial of Service (DoS) vulnerability via OOM using jq in ignoreDifferences. This vulnerability has been patched in version(s) 2.10.7, 2.9.12 and 2.8.16.

Affected products and versions

Product Affected versions Fixed in
argo-cd 2.10 2.10.0 → < 2.10.8 2.10.8
argo-cd 2.9 2.9.0 → < 2.9.13 2.9.13
argo-cd 2.8 earliest → < 2.8.17 2.8.17

References

Timeline

  1. Published
  2. Last modified

Other CVEs of argo-cd

The 49 CVEs of argo-cd →
CVE-2026-113709 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes 9.9 Critical CVE-2026-113708 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes 9.9 Critical CVE-2026-113672 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes 9.9 Critical CVE-2026-77459 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes 9.9 Critical
Track this CVE