TI-2026-31086 CVE-2026-42880 · GHSA-3v3m-wc6v-x4x3
ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction
Priority HIGH 76
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.
RHSA-2026:20947
Red Hat OpenShift GitOps v1.20.4 security update
Released 2026-05-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift GitOps 1.20 registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9, registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9, registry.redhat.io/openshift-gitops-1/dex-rhel9 +1
Fixes 3 records
TI-2026-24810 CVE-2026-32281 · GHSA-gjvh-7jh8-7xhm
Inefficient policy validation in crypto/x509
Priority LOW 39
Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service.
TI-2026-24811 CVE-2026-32282 · GHSA-xj38-jxc5-rppx
TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix
Priority LOW 30
On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root.