CVE-2022-31016

Description

DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd

Affected packages (4)

• Go/github.com/argoproj/argo-cd>= 0.7.0, < 2.1.16
• Go/github.com/argoproj/argo-cd>= 0.7.0
• Go/github.com/argoproj/argo-cd/v2from 0, < 2.1.16
• Go/github.com/argoproj/argo-cd/v2from 0, < 2.1.16, >= 2.2.0, < 2.2.10, >= 2.3.0, < 2.3.5, >= 2.4.0, < 2.4.1

CVSS scores

References (3)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2022-31016
• PATCHhttps://github.com/argoproj/argo-cd
• WEBhttps://github.com/argoproj/argo-cd/security/advisories/GHSA-jhqp-vf4w-rpwq