HIGH8.2Go
GHSA-58fx-7v9q-3g56· CVE-2024-13484, GO-2025-3427OpenShift GitOps Operator Namespace Isolation Break
Modified: 7/21/2026
package
Go/github.com/redhat-developer/gitops-operator
pkg:go/github.com/redhat-developer/gitops-operator
CRITICAL9.1Go
GHSA-pcqx-8qww-7f4v· CVE-2025-13888, GO-2025-4242OpenShift GitOps authenticated attackers can obtain cluster root access through forged ArgoCD custom resources
Modified: 2/3/2026
—Go
GO-2025-3427· CVE-2024-13484, GHSA-58fx-7v9q-3g56Malicious PrometheusRule creation to all namespaces that deploy a ArgoCD CR instance in github.com/redhat-developer/gitops-operator
Modified: 3/3/2026
—Go
GO-2025-4242· CVE-2025-13888, GHSA-pcqx-8qww-7f4vOpenShift GitOps authenticated attackers can obtain cluster root access through forged ArgoCD custom resources in github.com/redhat-developer/gitops-operator
Modified: 3/3/2026