Repository navigation
[GHSA-2hj5-g64g-fp6p] Argo CD allows cross-site scripting on repositories page - #11301
aungzayyanaing wants to merge 1 commit into
Conversation
|
Hi there @crenshaw-dev! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository. This change will be reviewed by our Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory |
There was a problem hiding this comment.
🟢 Approval recommended
The advisory update adds the official Argo CD v3.0.4 release reference and preserves the existing vulnerability and affected-version data without any active issues.
No open issues 🎉
What changed in this PR
Adds the official Argo CD v3.0.4 release reference to the existing GHSA advisory, documenting the release containing the security fix.
Changes:
- Updates the advisory modification timestamp.
- Adds the Argo CD v3.0.4 release URL as a web reference.
- Preserves the existing vulnerability and affected-version data.
| File | Description |
|---|---|
| advisories/github-reviewed/2025/05/GHSA-2hj5-g64g-fp6p/GHSA-2hj5-g64g-fp6p.json | Adds the official Argo CD v3.0.4 release reference to the advisory and updates its modification timestamp. |
Review effort: Lite (dynamic)
Updates
Comments
Add the official Argo CD v3.0.4 release reference. The release notes name GHSA-2hj5-g64g-fp6p and describe the critical security fix; the advisory is fixed in 3.0.4. Reference-only change; no other advisory fields were changed.