/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CGA-qmhq-3f9h-25f4

Published

Last updated

https://images.chainguard.dev/security/CGA-qmhq-3f9h-25f4
Package

argo-cd-2.11

Repository

Chainguard

Latest Update
Pending upstream fix
Aliases
  • CVE-2024-10220
  • GHSA-27wf-5967-98gx

Severity

Unknown

References

  • https://nvd.nist.gov/vuln/detail/CVE-2024-10220
  • https://github.com/advisories/GHSA-27wf-5967-98gx

Updates

Status

Pending upstream fix

Impact

Argo-cd still uses the depreciated v1alpha1 k8s.io api that was depreciated and removed after 1.27.x so upgrading to the fix version results in code breaking changes. Upstream compatibility implementation from the maintainers is required

Status

Under investigation

Safe Source for Open Source™
Contact us
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing

Solutions

FedRAMPPCI DSSGolden ImagesCVE RemediationPublic Sector

Customers

Customer StoriesChainguard Reviews

Resources

Events & WebinarsChainguard CoursesDocumentationTrust Center

Company

About UsBlogPartnersNewsroomCareersLegal