Skip to content

[GHSA-2hj5-g64g-fp6p] Argo CD allows cross-site scripting on repositories page - #11301

Open
aungzayyanaing wants to merge 1 commit into
aungzayyanaing/advisory-improvement-11301from
aungzayyanaing-GHSA-2hj5-g64g-fp6p
Open

aungzayyanaing wants to merge 1 commit into
aungzayyanaing/advisory-improvement-11301from
aungzayyanaing-GHSA-2hj5-g64g-fp6p

Conversation

@aungzayyanaing

Copy link
Copy Markdown

Updates

  • Affected products
  • References

Comments
Add the official Argo CD v3.0.4 release reference. The release notes name GHSA-2hj5-g64g-fp6p and describe the critical security fix; the advisory is fixed in 3.0.4. Reference-only change; no other advisory fields were changed.

@github

github commented Nov 13, 2026

Copy link
Copy Markdown
Collaborator

Hi there @crenshaw-dev! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository.

This change will be reviewed by our Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory

Copilot AI dynamic review requested due to automatic review settings November 13, 2026 11:40
@github-actions
github-actions Bot changed the base branch from main to aungzayyanaing/advisory-improvement-11301 November 13, 2026 11:40

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

The advisory update adds the official Argo CD v3.0.4 release reference and preserves the existing vulnerability and affected-version data without any active issues.

No open issues 🎉

What changed in this PR

Adds the official Argo CD v3.0.4 release reference to the existing GHSA advisory, documenting the release containing the security fix.

Changes:

  • Updates the advisory modification timestamp.
  • Adds the Argo CD v3.0.4 release URL as a web reference.
  • Preserves the existing vulnerability and affected-version data.
File Description
advisories/​github-reviewed/​2025/​05/​GHSA-2hj5-g64g-fp6p/​GHSA-2hj5-g64g-fp6p.json Adds the official Argo CD v3.0.4 release reference to the advisory and updates its modification timestamp.

Review effort: Lite (dynamic)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants