Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: ignore CVE-2022-0624 - not exploitable in Argo CD #10128

Merged
merged 1 commit into from Jul 28, 2022

Conversation

crenshaw-dev
Copy link
Collaborator

There's a good description of the vulnerability here: https://huntr.dev/bounties/afffb2bd-fb06-4144-829e-ecbbcbc85388/

Signed-off-by: CI <michael@crenshaw.dev>
@crenshaw-dev crenshaw-dev requested a review from leoluz July 28, 2022 13:41
@crenshaw-dev crenshaw-dev marked this pull request as ready for review July 28, 2022 13:41
@codecov
Copy link

codecov bot commented Jul 28, 2022

Codecov Report

Merging #10128 (2c4ccc8) into master (ab90d80) will increase coverage by 0.01%.
The diff coverage is 100.00%.

@@            Coverage Diff             @@
##           master   #10128      +/-   ##
==========================================
+ Coverage   45.87%   45.88%   +0.01%     
==========================================
  Files         227      227              
  Lines       27373    27373              
==========================================
+ Hits        12556    12560       +4     
+ Misses      13113    13109       -4     
  Partials     1704     1704              
Impacted Files Coverage Δ
util/oidc/oidc.go 57.70% <100.00%> (+1.58%) ⬆️
util/settings/settings.go 50.90% <0.00%> (ø)

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update a329416...2c4ccc8. Read the comment docs.

@crenshaw-dev crenshaw-dev merged commit e786ff8 into argoproj:master Jul 28, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants