quay.io/argoproj/argocd:v3.4.4

golang.org/x/crypto vulnerable to auth bypass via unenforced @revoked status

gRPC-Go has an authorization bypass via missing leading slash in :path

golang.org/x/crypto: Invoking VerifiedPublicKeyCallback permissions skip enforcement

golang.org/x/crypto: Invoking client can cause server deadlock on unexpected responses

golang.org/x/crypto doesn't drop invoking agent constraints when forwarding keys

SpdyStream: DOS on CRI

golang.org/x/crypto vulnerable to infinite loop on large channel writes

Helm's Missing YAML Content Leads To Panic

golang.org/x/crypto: FIDO/U2F security key physical presence check can be bypassed

golang.org/x/crypto doesn't enforce invoking key constraints

Helm Vulnerable to denial of service through string value parsing

Helm passes repository credentials to alternate domain

Helm vulnerable to Code Injection through malicious chart.yaml content

golang.org/x/crypto: Invoking byte arithmetic causes underflow and panic

golang.org/x/crypto: Invoking pathological RSA/DSA parameters may cause DoS

oras-go has file store write outside workingDir via symlink traversal

go-billy has path traversal vulnerabilities

oras-go blob upload vulnerable to credential forwarding via unvalidated Location header

`oras-go` tar extraction: Hardlink entry with relative Linkname escapes extract dir via process CWD resolution

Helm dependency management path traversal

go-git: Worktree operations may follow symlinks

Memory exhaustion in query parameter parsing in net/url

Helm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow

Helm vulnerable to denial of service through through repository index file

Helm vulnerable to denial of service through schema file

Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination

Helm vulnerable to denial of service through string value parsing

containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull

go-billy: Lack of depth and cycle detection in symlink resolution may lead to infinite loops and resource exhaustion

go-git: Malicious reference names may modify files outside the reference storage

golang.org/x/crypto vulnerable to invoking bypass of certificate restrictions

Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion

Helm May Panic Due To Incorrect YAML Content

Go Net HTML parser is vulnerable to denial of service

containerd image-triggered runtime DoS via unbounded group parsing

golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumption

containerd user ID handling bypass allows runAsNonRoot evasion

golang.org/x/crypto: Invoking memory leak when rejecting channels can lead to DoS

golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read