CVE-2024-32476

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. There is a Denial of Service (DoS) vulnerability via OOM using jq in ignoreDifferences. This vulnerability has been patched in version(s) 2.10.7, 2.9.12 and 2.8.16.

• CWE-400

• https://github.com/argoproj/argo-cd/commit/7893979a1e78d59cedd0ba790ded24e30bb40657Patch
• https://github.com/argoproj/argo-cd/commit/9e5cc5a26ff0920a01816231d59fdb5eae032b5aPatch
• https://github.com/argoproj/argo-cd/commit/e2df7315fb7d96652186bf7435773a27be330cacPatch
• https://github.com/argoproj/argo-cd/security/advisories/GHSA-9m6p-x4h2-6frqVendor Advisory
• https://github.com/argoproj/argo-cd/commit/7893979a1e78d59cedd0ba790ded24e30bb40657Patch
• https://github.com/argoproj/argo-cd/commit/9e5cc5a26ff0920a01816231d59fdb5eae032b5aPatch
• https://github.com/argoproj/argo-cd/commit/e2df7315fb7d96652186bf7435773a27be330cacPatch
• https://github.com/argoproj/argo-cd/security/advisories/GHSA-9m6p-x4h2-6frqVendor Advisory

Published

May 14, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-3247In Xpdf 4.05 (and earlier), a PDF object loop in an object s…5.5
• CVE-2024-32470Tolgee is an open-source localization platform. When API key…6.5
• CVE-2024-32472excalidraw is an open source virtual hand-drawn style whiteb…6.1
• CVE-2024-32473Moby is an open source container framework that is a key com…6.5
• CVE-2024-32474Sentry is an error tracking and performance monitoring platf…6.5
• CVE-2024-32475Envoy is a cloud-native, open source edge and service proxy.…7.5
• CVE-2024-32477Deno is a JavaScript, TypeScript, and WebAssembly runtime wi…7.4
• CVE-2024-32478Git Credential Manager (GCM) is a secure Git credential help…6.9
• CVE-2024-32479LibreNMS is an open-source, PHP/MySQL/SNMP-based network mon…5.4
• CVE-2024-3248In Xpdf 4.05 (and earlier), a PDF object loop in the attachm…5.5
• CVE-2024-32480LibreNMS is an open-source, PHP/MySQL/SNMP-based network mon…7.2
• CVE-2024-32481Vyper is a pythonic Smart Contract Language for the Ethereum…5.3