argo-cd-2.10.advisories.yaml

schema-version: 2.0.2

package:
  name: argo-cd-2.10

advisories:
  - id: CVE-2024-21652
    aliases:
      - GHSA-x32m-mvfj-52xv
    events:
      - timestamp: 2024-03-19T10:19:27Z
        type: fixed
        data:
          fixed-version: 2.10.4-r0

  - id: CVE-2024-24786
    aliases:
      - GHSA-8r3f-844c-mc37
    events:
      - timestamp: 2024-03-14T07:20:15Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: argo-cd-2.10
            componentID: 70948ddb718ad7e5
            componentName: google.golang.org/protobuf
            componentVersion: v1.31.0
            componentType: go-module
            componentLocation: /usr/bin/argocd
            scanner: grype
      - timestamp: 2024-03-15T00:35:37Z
        type: fixed
        data:
          fixed-version: 2.10.3-r1

  - id: CVE-2024-28180
    aliases:
      - GHSA-c5q2-7r4c-mv6g
    events:
      - timestamp: 2024-03-08T07:04:01Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: argo-cd-2.10
            componentID: 01bb87cfc9651e9f
            componentName: github.com/go-jose/go-jose/v3
            componentVersion: v3.0.1
            componentType: go-module
            componentLocation: /usr/bin/argocd
            scanner: grype
      - timestamp: 2024-03-08T22:43:36Z
        type: fixed
        data:
          fixed-version: 2.10.2-r2