| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/argoproj/argo-cd | < 1.5.1 | 1.5.1 |
| argo cd | < 1.5.0 | 1.5.0 |
As of v1.5.0, the Argo API does not implement anti-automation measures such as rate limiting, account lockouts, or other anti-bruteforce measures. Attackers can submit an unlimited number of authentication attempts without consequence.
github.com/argoproj/argo-cd/util/cache
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free