TI-2025-34866 CVE-2025-55190 · GHSA-786q-9hcg-v9ff
Argo CD: Project API Token Exposes Repository Credentials
Priority MEDIUM 51
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.
RHSA-2026:1017
Red Hat OpenShift GitOps v1.18.3 security update
Released 2026-01-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift GitOps 1.18 registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8, registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8, registry.redhat.io/openshift-gitops-1/argocd-rhel8 +4
Fixes 6 records
TI-2025-12691 CVE-2025-13888 · GHSA-pcqx-8qww-7f4v
Openshift-gitops-operator: openshift gitops: namespace admin cluster takeover via privileged jobs
Priority MEDIUM 42
A flaw was found in OpenShift GitOps.
TI-2025-30317 CVE-2025-47913 · GHSA-56w8-48fp-6mgv
Potential denial of service in golang.org/x/crypto/ssh/agent
Priority MEDIUM 40
SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.
TI-2025-41736 CVE-2025-68156 · GHSA-cfpf-hrx2-8rv6
Expr has Denial of Service via Unbounded Recursion in Builtin Functions
Priority LOW 39
Expr is an expression language and expression evaluation for Go.
TI-2025-38131 CVE-2025-61729 · GHSA-7c64-f9jr-v9h2
Excessive resource consumption when printing error string for host certificate validation in crypto/x509
Priority LOW 33
Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out.
TI-2025-35990 CVE-2025-58183 · GHSA-9gcr-gp5f-jw27
Unbounded allocation when parsing GNU sparse map in archive/tar
Priority LOW 20
tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files.