GO-2024-2667

Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

At a glance

Published
Updated
CVE
CVE-2024-29893
Aliases
BIT-argo-cd-2024-29893, GHSA-jhwx-mhww-rgc3

Description

Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2

Affected packages

PackageVersions
Go · github.com/argoproj/argo-cd/v2introduced 2.4.0, fixed 2.8.14, introduced 2.9.0, fixed 2.9.10, introduced 2.10.0, fixed 2.10.5

References

Sources

SourceLicence
OSV.devCC-BY 4.0 — Go Vulnerability Database