Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 07:53:42 +0000 CVE-2024-31990 — Argo CD' API server does not enforce project sourceNamespaces https://cve.radiocsirt.org/vuln/cve-2024-31990 <p><strong>Affected:</strong> argoproj argo-cd, kubernetes argo-cd</p> <p>Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. The API server does not enforce project sourceNamespaces which allows attackers to use the UI to edit resources which should only be mutable via gitops. This vulenrability is fixed in 2.10.7, 2.9.12, and 2.8.16.</p> <p><strong>Affected:</strong> argoproj argo-cd, kubernetes argo-cd</p> <p>Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. The API server does not enforce project sourceNamespaces which allows attackers to use the UI to edit resources which should only be mutable via gitops. This vulenrability is fixed in 2.10.7, 2.9.12, and 2.8.16.</p> https://cve.radiocsirt.org/vuln/cve-2024-31990