https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T13:41:05.239809+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-40634 CVE-2024-40634 — Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint 2026-10-07T13:41:05.240984+00:00

Affected: argoproj argo-cd

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. This report details a security vulnerability in Argo CD, where an unauthenticated attacker can send a specially crafted large JSON payload to the /api/webhook endpoint, causing excessive memory allocation that leads to service disruption by triggering an Out Of Memory (OOM) kill. The issue poses a high risk to the availability of Argo CD deployments. This vulnerability is fixed in 2.11.6, 2.10.15, and 2.9.20.