Package
argo-cd-3.5
Component
k8s.io/kubernetes
Latest update
3.1
CVSS V3
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Justification
Impact
CVE-2024-7598 (GHSA-r56h-j38w-hrqq) affects k8s.io/kubernetes/cmd/kube-apiserver in the range >= 1.3.0, <= 1.32.3, addressed upstream by the Ordered Namespace Deletion enhancement (KEP-5080) which reached stable in Kubernetes 1.34. This artifact builds against k8s.io/kubernetes v1.36.1, which is outside the vulnerable range, so it is not affected. The Go vulnerability database record GO-2025-3547 omits a fixed version, causing scanners to flag every version of the module.
Status