Argo Events Project vulnerabilities
We track 1 vulnerability in Argo Events Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 17, 2022.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Argo Events Project vulnerabilities
- 7.5 High severity
github.com/argoproj/argo-events/sensors/artifac…: Improper Limitation of a Pathname to a Restricted Directory
The package github.com/argoproj/argo-events/sensors/artifacts before 1.7.1 are vulnerable to Directory Traversal in the (g *GitArtifactReader).Read() API in git.go. This could allow arbitrary file reads if the GitArtifactReader is provided a pathname containin