https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T22:41:45.389204+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-27454 cnvd-2020-27454 2026-10-09T22:41:45.462435+00:00 cnvd-2020-27454 https://cve.radiocsirt.org/vuln/euvd-2026-40707 EUVD-2026-40707 2026-10-09T22:41:45.462480+00:00 EUVD-2026-40707 https://cve.radiocsirt.org/vuln/fkie_cve-2020-11576 fkie_cve-2020-11576 2026-10-09T22:41:45.462495+00:00

Fixed in v1.5.1, Argo version v1.5.0 was vulnerable to a user-enumeration vulnerability which allowed attackers to determine the usernames of valid (non-SSO) accounts because /api/v1/session returned 401 for an existing username and 404 otherwise.

 https://cve.radiocsirt.org/vuln/ghsa-vj54-cjrx-x696 GHSA-vj54-cjrx-x696 — Observable Discrepancy in Argo 2026-10-09T22:41:45.462526+00:00

Affected: Go: github.com/argoproj/argo-cd

Fixed in v1.5.1, Argo version v1.5.0 was vulnerable to a user-enumeration vulnerability which allowed attackers to determine the usernames of valid (non-SSO) accounts because /api/v1/session returned 401 for an existing username and 404 otherwise.

### Specific Go Packages Affected github.com/argoproj/argo-cd/util/session github.com/argoproj/argo-cd/server/session

 https://cve.radiocsirt.org/vuln/gsd-2020-11576 gsd-2020-11576 2026-10-09T22:41:45.462554+00:00 gsd-2020-11576