Database/Control plane, storage & DevOps
Argo CD: repo-server extracts a user-controlled tar.gz without size validation
CVE-2023-40584Control plane, storage & DevOpscurated
Impact
repo-server extracts a user-controlled tar.gz without size validation -> denial of service
Who can reach it
Network (remote)
What to do
Control-plane: upgrade; isolate and resource-cap the repo-server
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.