🛡️ CGA-67px-q2r2-v28w — argo-cd-3.2

Affected software and timeline

Affected software: argo-cd-3.2 (fixed in 3.2.12-r5), argo-cd-3.2-compat (fixed in 3.2.12-r5), argo-cd-3.3 (fixed in 3.3.12-r3), argo-cd-3.4 (fixed in 3.4.4-r2), argo-cd-3.4-compat (fixed in 3.4.4-r2), argo-cd-fips-3.2 (fixed in 3.2.12-r9), argo-cd-fips-3.2-compat (fixed in 3.2.12-r9), argo-cd-fips-3.3 (fixed in 3.3.12-r4), argo-cd-fips-3.3-compat (fixed in 3.3.12-r4), argo-cd-fips-3.4 (fixed in 3.4.4-r3), argo-cd-fips-3.4-compat (fixed in 3.4.4-r3), argocd-image-updater (fixed in 1.2.2-r2), argocd-image-updater-fips (fixed in 1.2.2-r1), cert-manager-cmctl (fixed in 2.5.0-r9), cert-manager-cmctl-fips (fixed in 2.5.0-r5), chaos-mesh (fixed in 2.8.3-r4), chaos-mesh-fips (fixed in 2.8.3-r3), chartmuseum (fixed in 0.16.5-r16), chartmuseum-fips (fixed in 0.16.5-r15), cilium-cli (fixed in 0.19.5-r1), cloudbeat-8.17 (fixed in 8.17.10-r29), cloudbeat-9.0 (fixed in 9.0.8-r31), cloudbeat-9.1 (fixed in 9.1.10-r24), cloudbeat-9.2 (fixed in 9.2.8-r13), cloudbeat-fips-8.17 (fixed in 8.17.10-r34), cloudbeat-fips-9.0 (fixed in 9.0.8-r35), cloudbeat-fips-9.1 (fixed in 9.1.10-r27), cloudbeat-fips-9.2 (fixed in 9.2.8-r10), cluster-api-helm-controller (fixed in 0.6.4-r9), cluster-api-helm-controller-fips (fixed in 0.6.4-r8), conftest (fixed in 0.68.2-r5), conftest-fips (fixed in 0.68.2-r7), consul-k8s-1.1-cli (fixed in 1.1.18-r41), consul-k8s-1.3-cli (fixed in 1.3.9-r47), consul-k8s-1.4-cli (fixed in 1.4.10-r33), consul-k8s-1.5-cli (fixed in 1.5.9-r31), consul-k8s-1.6-cli (fixed in 1.6.10-r25), consul-k8s-1.7-cli (fixed in 1.7.13-r15), consul-k8s-1.9-cli (fixed in 1.9.9-r1), consul-k8s-2.0-cli (fixed in 2.0.1-r2), consul-k8s-fips-1.1-cli (fixed in 1.1.18-r40), consul-k8s-fips-1.3-cli (fixed in 1.3.9-r43), consul-k8s-fips-1.4-cli (fixed in 1.4.10-r32), consul-k8s-fips-1.5-cli (fixed in 1.5.9-r33), consul-k8s-fips-1.6-cli (fixed in 1.6.10-r26), consul-k8s-fips-1.7-cli (fixed in 1.7.13-r17), consul-k8s-fips-1.9-cli (fixed in 1.9.9-r2), consul-k8s-fips-2.0-cli (fixed in 2.0.1-r3), crossplane-2.3-crank (fixed in 2.3.3-r5), crossplane-fips-2.3-crank (fixed in 2.3.3-r3), drone (fixed in 3.3.0-r8), drone-fips (fixed in 3.3.0-r8), eksctl (fixed in 0.229.0-r1), envoy-gateway-1.5-egctl (fixed in 1.5.9-r1), envoy-gateway-1.6-egctl (fixed in 1.6.7-r1), envoy-gateway-1.7-egctl (fixed in 1.7.4-r1), envoy-gateway-fips-1.5-egctl (fixed in 1.5.9-r1), envoy-gateway-fips-1.6-egctl (fixed in 1.6.7-r1), envoy-gateway-fips-1.7-egctl (fixed in 1.7.4-r1), falcoctl (fixed in 0.13.0-r10), falcoctl-fips (fixed in 0.13.0-r8), gatekeeper-3.22-gator (fixed in 3.22.2-r7), gitlab-operator (fixed in 3.1.1-r1), gitlab-operator-fips (fixed in 3.1.1-r1), gitness (fixed in 3.3.0-r25), gogatekeeper (fixed in 4.10.0-r2), headlamp (fixed in 0.43.0-r3), headlamp-fips (fixed in 0.43.0-r5), helm-exporter (fixed in 1.3.0-r14), helm-exporter-fips (fixed in 1.3.0-r14), helm-mapkubeapis (fixed in 0.6.1-r22), helm-operator (fixed in 1.42.3-r1), helm-operator-fips (fixed in 1.42.3-r2), helm-push (fixed in 0.11.1-r17), helm-set-status (fixed in 0.3.0-r22), jfrog-cli (fixed in 2.112.0-r0), k8ssandra-client (fixed in 0.8.14-r2), k8ssandra-client-fips (fixed in 0.8.14-r1), k9s (fixed in 0.51.0-r5), k9s-fips (fixed in 0.51.0-r4), kargo (fixed in 1.10.8-r2), kgateway-2.3 (fixed in 2.3.5-r3), kgateway-fips-2.3 (fixed in 2.3.5-r2), kots (fixed in 1.130.6-r2), kube-arangodb-1.4 (fixed in 1.4.3-r14), kube-arangodb-fips-1.4 (fixed in 1.4.3-r8), kube-mgmt (fixed in 11.0.7-r6), kube-mgmt-fips (fixed in 11.0.7-r8), kubescape (fixed in 4.0.10-r3), kubescape-operator (fixed in 0.2.151-r4), kubescape-operator-fips (fixed in 0.2.151-r6), kubescape-server (fixed in 4.0.10-r3), kubescape-server-downloader (fixed in 4.0.10-r3), kubescape-server-fips (fixed in 4.0.10-r4), kubescape-server-fips-downloader (fixed in 4.0.10-r4), kyverno-1.15 (fixed in 1.15.3-r24), kyverno-1.16 (fixed in 1.16.4-r12), kyverno-1.17 (fixed in 1.17.2-r17), kyverno-1.18 (fixed in 1.18.1-r11), kyverno-background-controller-1.15 (fixed in 1.15.3-r24), kyverno-background-controller-1.16 (fixed in 1.16.4-r12), kyverno-background-controller-1.17 (fixed in 1.17.2-r17), kyverno-background-controller-1.18 (fixed in 1.18.1-r11), kyverno-background-controller-fips-1.15 (fixed in 1.15.20-r9), kyverno-background-controller-fips-1.16 (fixed in 1.16.4-r11), kyverno-background-controller-fips-1.17 (fixed in 1.17.2-r12), kyverno-background-controller-fips-1.18 (fixed in 1.18.2-r3), kyverno-cleanup-controller-1.15 (fixed in 1.15.3-r24), kyverno-cleanup-controller-1.16 (fixed in 1.16.4-r12), kyverno-cleanup-controller-1.17 (fixed in 1.17.2-r17), kyverno-cleanup-controller-1.18 (fixed in 1.18.1-r11), kyverno-cleanup-controller-fips-1.15 (fixed in 1.15.20-r9), kyverno-cleanup-controller-fips-1.16 (fixed in 1.16.4-r11), kyverno-cleanup-controller-fips-1.17 (fixed in 1.17.2-r12), kyverno-cleanup-controller-fips-1.18 (fixed in 1.18.2-r3), kyverno-cli-1.15 (fixed in 1.15.3-r24), kyverno-cli-1.17 (fixed in 1.17.2-r17), kyverno-cli-1.18 (fixed in 1.18.1-r11), kyverno-cli-fips-1.15 (fixed in 1.15.20-r9), kyverno-cli-fips-1.16 (fixed in 1.16.4-r11), kyverno-cli-fips-1.18 (fixed in 1.18.2-r3), kyverno-fips-1.15 (fixed in 1.15.20-r9), kyverno-fips-1.16 (fixed in 1.16.4-r11), kyverno-fips-1.17 (fixed in 1.17.2-r12), kyverno-fips-1.18 (fixed in 1.18.2-r3), kyverno-init-container-1.15 (fixed in 1.15.3-r24), kyverno-init-container-1.16 (fixed in 1.16.4-r12), kyverno-init-container-1.17 (fixed in 1.17.2-r17), kyverno-init-container-1.18 (fixed in 1.18.1-r11), kyverno-init-container-fips-1.15 (fixed in 1.15.20-r9), kyverno-init-container-fips-1.16 (fixed in 1.16.4-r11), kyverno-init-container-fips-1.18 (fixed in 1.18.2-r3), kyverno-notation-aws (fixed in 1.1-r65), kyverno-notation-aws-fips (fixed in 1.1-r58), kyverno-reports-controller-1.15 (fixed in 1.15.3-r24), kyverno-reports-controller-1.16 (fixed in 1.16.4-r12), kyverno-reports-controller-1.17 (fixed in 1.17.2-r17), kyverno-reports-controller-1.18 (fixed in 1.18.1-r11), kyverno-reports-controller-fips-1.15 (fixed in 1.15.20-r9), kyverno-reports-controller-fips-1.16 (fixed in 1.16.4-r11), kyverno-reports-controller-fips-1.17 (fixed in 1.17.2-r12), kyverno-reports-controller-fips-1.18 (fixed in 1.18.2-r3), linkerd2-cli (fixed in 26.6.3-r3), linkerd2-controller (fixed in 26.6.3-r3), linkerd2-fips-cli (fixed in 26.6.3-r4), linkerd2-fips-controller (fixed in 26.6.3-r4), linkerd2-fips-metrics-api (fixed in 26.6.3-r4), linkerd2-fips-tap (fixed in 26.6.3-r4), linkerd2-fips-web (fixed in 26.6.3-r4), linkerd2-metrics-api (fixed in 26.6.3-r3), linkerd2-tap (fixed in 26.6.3-r3), linkerd2-web (fixed in 26.6.3-r3), manifest-tool (fixed in 2.2.2-r6), maru (fixed in 0.6.0-r18), ocm-cli (fixed in 0.7.0-r3), ocm-cli-fips (fixed in 0.7.0-r2), ocm-kubernetes-controller (fixed in 0.7.0-r2), ocm-kubernetes-controller-fips (fixed in 0.7.0-r1), opentofu-1.10 (fixed in 1.10.10-r9), opentofu-1.11 (fixed in 1.11.11-r2), opentofu-1.12 (fixed in 1.12.3-r2), opentofu-fips-1.10 (fixed in 1.10.10-r4), opentofu-fips-1.11 (fixed in 1.11.11-r1), opentofu-fips-1.12 (fixed in 1.12.3-r2), oras (fixed in 1.3.2-r6), oras-fips (fixed in 1.3.2-r5), rancher-2.11 (fixed in 2.11.15-r1), rancher-2.12 (fixed in 2.12.11-r2), rancher-2.13 (fixed in 2.13.7-r1), rancher-2.14 (fixed in 2.14.3-r2), rancher-agent-2.11 (fixed in 2.11.15-r2), rancher-agent-2.12 (fixed in 2.12.11-r1), rancher-agent-2.13 (fixed in 2.13.7-r1), rancher-agent-2.14 (fixed in 2.14.3-r1), rancher-fleet-agent (fixed in 0.15.4-r2), rancher-fleet-agent-fips (fixed in 0.15.4-r2), rancher-fleet-cli (fixed in 0.15.4-r2), rancher-fleet-cli-fips (fixed in 0.15.4-r2), rancher-fleet-controller (fixed in 0.15.4-r2), rancher-fleet-controller-fips (fixed in 0.15.4-r2), rancher-helm-3 (fixed in 3.20.0-r16), ratify (fixed in 1.4.0-r38), ratify-fips (fixed in 1.4.0-r36), ratify-fips-licensechecker (fixed in 1.4.0-r36), ratify-fips-sbom (fixed in 1.4.0-r36), ratify-fips-schemavalidator (fixed in 1.4.0-r36), ratify-fips-vulnerabilityreport (fixed in 1.4.0-r36), ratify-licensechecker (fixed in 1.4.0-r38), ratify-sbom (fixed in 1.4.0-r38), ratify-schemavalidator (fixed in 1.4.0-r38), ratify-vulnerabilityreport (fixed in 1.4.0-r38), redpanda-operator (fixed in 26.1.7-r1), redpanda-operator-25.1 (fixed in 25.1.4-r8), redpanda-operator-25.2 (fixed in 25.2.6-r3), redpanda-operator-25.3 (fixed in 25.3.7-r3), redpanda-operator-26.1 (fixed in 26.1.7-r1), steampipe (fixed in 2.4.4-r8), teleport-17 (fixed in 17.7.26-r2), teleport-18 (fixed in 18.9.2-r2), teleport-18.6 (fixed in 18.6.8-r31), tigera-operator-1.40 (fixed in 1.40.13-r2), tigera-operator-1.41 (fixed in 1.41.1-r17), tigera-operator-1.42 (fixed in 1.42.3-r1), tigera-operator-fips-1.40 (fixed in 1.40.13-r2), tigera-operator-fips-1.41 (fixed in 1.41.1-r14), tigera-operator-fips-1.42 (fixed in 1.42.3-r1), trivy (fixed in 0.72.0-r2), trivy-fips (fixed in 0.72.0-r2), trivy-operator (fixed in 0.30.1-r23), trivy-operator-fips (fixed in 0.30.1-r19), tw (fixed in 0.0.50-r1), twt (fixed in 0.0.50-r1), vcluster (fixed in 0.35.1-r3), vcluster-cli (fixed in 0.35.1-r3), vcluster-cli-fips (fixed in 0.35.1-r2), vcluster-fips (fixed in 0.35.1-r2), vcluster-syncer (fixed in 0.35.1-r3), vcluster-syncer-fips (fixed in 0.35.1-r2), xeol (fixed in 0.10.8-r48), xeol-fips (fixed in 0.10.8-r46), zarf (fixed in 0.80.0-r4) and zarf-fips (fixed in 0.80.0-r5). Published on 2 July 2026 and last revised on 17 July 2026. No public exploit is currently recorded for this entry. Record sourced from OSV.

Details

Affected Packages

References