| Package | Affected versions | Patched versions |
|---|---|---|
| argo cd | ≥ 1.8.0, < 1.8.4< 1.7.12 | 1.8.41.7.12 |
In util/session/sessionmanager.go in Argo CD before 1.8.4, tokens continue to work even when the user account is disabled.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free