Low
Helm Lacks Granularity in Workflow Role
Type: advisorySources: OSV
Argo Helm is a collection of community maintained charts for `argoproj.github.io` projects. Prior to version 0.45.0, the `workflow-role`) lacks granularity in its privileges, giving permissions to `workflowtasksets` and `workflowartifactgctasks` to all workflow Pods, when only certain types of Pods created by the Controller require these privileges. The impact is minimal, as an attack could only affect status reporting for certain types of Pods and templates. Version 0.45.0 fixes the issue.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2024-52814
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 4 Nov 2026, 23:33 UTC · Revision 1
Source evidence
Argo Helm is a collection of community maintained charts for `argoproj.github.io` projects. Prior to version 0.45.0, the `workflow-role`) lacks granularity in its privileges, giving permissions to `workflowtasksets` and `workflowartifactgctasks` to all workflow Pods, when only certain types of Pods created by the Controller require these privileges. The impact is minimal, as an attack could only affect status reporting for certain types of Pods and templates. Version 0.45.0 fixes the issue.
osv:CVE-2024-52814
Complete source record
{
"id": "7bb8cb52c7cfd3a29b8695cd215308a7b9750ac01ad6963acdf5b4f8f2482bab",
"url": "https://osv.dev/vulnerability/CVE-2024-52814",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Helm Lacks Granularity in Workflow Role",
"summary": "Argo Helm is a collection of community maintained charts for `argoproj.github.io` projects. Prior to version 0.45.0, the `workflow-role`) lacks granularity in its privileges, giving permissions to `workflowtasksets` and `workflowartifactgctasks` to all workflow Pods, when only certain types of Pods created by the Controller require these privileges. The impact is minimal, as an attack could only affect status reporting for certain types of Pods and templates. Version 0.45.0 fixes the issue.",
"evidence": "osv:CVE-2024-52814",
"products": [],
"severity": "low",
"structured": {
"id": "CVE-2024-52814",
"aliases": [
"CVE-2024-52814",
"GHSA-h974-w8pg-cx73"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/argoproj/argo-helm",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "90eef9ef1f8c5e58e6fdb0459047363d62a2e328"
}
],
"database_specific": {
"extracted_events": [
{
"range": [
{
"introduced": "0"
},
{
"fixed": "0.45.0"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StringRangeExpression"
},
{
"range": [
{
"introduced": "0"
},
{
"fixed": "0.45.0"
}
],
"source": "DESCRIPTION"
}
]
}
}
],
"versions": [
"argo-workflows-0.44.1",
"argo-rollouts-2.38.0",
"argo-cd-7.7.5",
"argo-workflows-0.44.0",
"argo-workflows-0.43.0",
"argo-cd-7.7.4",
"argo-cd-7.7.3",
"argo-cd-7.7.2",
"argo-cd-7.7.1",
"argocd-image-updater-0.11.2",
"argo-rollouts-2.37.8",
"argo-cd-7.7.0",
"argo-workflows-0.42.7",
"argo-workflows-0.42.6",
"argocd-image-updater-0.11.1",
"argo-cd-7.6.12",
"argo-cd-7.6.11",
"argo-cd-7.6.10",
"argo-cd-7.6.9",
"argo-cd-7.6.8",
"argo-workflows-0.42.5",
"argocd-apps-2.0.2",
"argo-cd-7.6.7",
"argo-cd-7.6.6",
"argo-workflows-0.42.4",
"argo-cd-7.6.5",
"argo-cd-7.6.4",
"argo-cd-7.6.3",
"argo-cd-7.6.2",
"argo-workflows-0.42.3",
"argo-cd-7.6.1",
"argo-cd-7.6.0",
"argo-events-2.4.8",
"argo-rollouts-2.37.7",
"argo-workflows-0.42.2",
"argocd-apps-2.0.1",
"argo-cd-7.5.2",
"argo-cd-7.5.1",
"argo-workflows-0.42.1",
"argo-rollouts-2.37.6",
"argo-cd-7.5.0",
"argo-cd-7.4.7",
"argo-cd-7.4.6",
"argo-cd-7.4.5",
"argo-workflows-0.42.0",
"argo-cd-7.4.4",
"argo-rollouts-2.37.5",
"argo-cd-7.4.3",
"argo-rollouts-2.37.4",
"argo-cd-7.4.2",
"argo-cd-7.4.1",
"argo-cd-7.4.0",
"argo-workflows-0.41.14",
"argo-workflows-0.41.13",
"argo-workflows-0.41.12",
"argo-rollouts-2.37.3",
"argo-cd-7.3.11",
"argo-cd-7.3.10",
"argo-cd-7.3.9",
"argo-cd-7.3.8",
"argo-cd-7.3.7",
"argo-cd-7.3.6",
"argo-cd-7.3.5",
"argocd-image-updater-0.11.0",
"argo-cd-7.3.4",
"argo-rollouts-2.37.2",
"argo-cd-7.3.3",
"argo-cd-7.3.2",
"argo-rollouts-2.37.1",
"argo-rollouts-2.37.0",
"argo-events-2.4.7",
"argo-rollouts-2.36.2",
"argo-cd-7.3.1",
"argo-cd-7.3.0",
"argo-rollouts-2.36.1",
"argo-cd-7.2.1",
"argo-cd-7.2.0",
"argo-cd-7.1.5",
"argo-workflows-0.41.11",
"argo-workflows-0.41.10",
"argo-cd-7.1.4",
"argo-workflows-0.41.9",
"argo-rollouts-2.36.0",
"argocd-image-updater-0.10.2",
"argo-events-2.4.6",
"argo-workflows-0.41.8",
"argo-cd-7.1.3",
"argo-cd-7.1.2",
"argo-cd-7.1.1",
"argo-cd-7.1.0",
"argo-cd-7.0.0",
"argocd-image-updater-0.10.1",
"argo-workflows-0.41.7",
"argo-events-2.4.5",
"argo-cd-6.11.1",
"argo-cd-6.11.0",
"argo-rollouts-2.35.3",
"argo-cd-6.10.2",
"argo-cd-6.10.1",
"argo-cd-6.10.0",
"argo-workflows-0.41.6",
"argo-workflows-0.41.5",
"argo-cd-6.9.3",
"argocd-image-updater-0.10.0",
"argo-cd-6.9.2",
"argo-cd-6.9.1",
"argo-cd-6.9.0",
"argo-cd-6.8.1",
"argo-cd-6.8.0",
"argo-rollouts-2.35.2",
"argo-workflows-0.41.4",
"argo-cd-6.7.18",
"argo-workflows-0.41.3",
"argo-cd-6.7.17",
"argo-cd-6.7.16",
"argo-cd-6.7.15",
"argo-cd-6.7.14",
"argo-workflows-0.41.2",
"argo-cd-6.7.13",
"argocd-image-updater-0.9.7",
"argo-cd-6.7.12",
"argo-cd-6.7.11",
"argo-cd-6.7.10",
"argo-cd-6.7.9",
"argo-workflows-0.41.1",
"argo-cd-6.7.8",
"argo-cd-6.7.7",
"argo-cd-6.7.6",
"argo-cd-6.7.5",
"argo-cd-6.7.4",
"argo-rollouts-2.35.1",
"argo-workflows-0.41.0",
"argo-rollouts-2.35.0",
"argocd-apps-2.0.0",
"argo-events-2.4.4",
"argo-rollouts-2.34.4",
"argocd-image-updater-0.9.6",
"argo-cd-6.7.3",
"argo-cd-6.7.2",
"argo-cd-6.7.1",
"argo-cd-6.7.0",
"argo-workflows-0.40.14",
"argo-cd-6.6.0",
"argo-cd-6.5.1",
"argo-workflows-0.40.13",
"argocd-image-updater-0.9.5",
"argo-workflows-0.40.12",
"argo-cd-6.5.0",
"argo-cd-6.4.1",
"argocd-apps-1.6.2",
"argo-cd-6.4.0",
"argo-cd-6.3.1",
"argo-cd-6.3.0",
"argo-cd-6.2.5",
"argo-cd-6.2.4",
"argo-cd-6.2.3",
"argo-cd-6.2.2",
"argo-cd-6.2.1",
"argo-cd-6.2.0",
"argocd-image-updater-0.9.4",
"argo-workflows-0.40.11",
"argo-cd-6.1.0",
"argo-cd-6.0.14",
"argo-cd-6.0.13",
"argo-events-2.4.3",
"argo-rollouts-2.34.3",
"argo-cd-6.0.12",
"argo-cd-6.0.11",
"argo-cd-6.0.10",
"argo-cd-6.0.9",
"argo-cd-6.0.8",
"argo-cd-6.0.7",
"argo-cd-6.0.6",
"argo-cd-6.0.5",
"argo-cd-6.0.4",
"argo-cd-6.0.3",
"argo-cd-6.0.2",
"argo-cd-6.0.1",
"argo-cd-6.0.0",
"argo-cd-5.55.0",
"argo-cd-5.54.0",
"argo-cd-5.53.14",
"argo-workflows-0.40.10",
"argo-cd-5.53.13",
"argocd-apps-1.6.1",
"argo-cd-5.53.12",
"argo-cd-5.53.11",
"argocd-apps-1.6.0",
"argo-cd-5.53.10",
"argo-workflows-0.40.9",
"argo-cd-5.53.9",
"argo-rollouts-2.34.2",
"argocd-apps-1.5.0",
"argo-workflows-0.40.8",
"argo-cd-5.53.8",
"argo-cd-5.53.7",
"argo-cd-5.53.6",
"argo-cd-5.53.5",
"argo-cd-5.53.4",
"argo-cd-5.53.3",
"argo-cd-5.53.2",
"argo-cd-5.53.1",
"argo-cd-5.53.0",
"argocd-image-updater-0.9.3",
"argo-workflows-0.40.7",
"argo-cd-5.52.2",
"argo-workflows-0.40.6",
"argo-workflows-0.40.5",
"argo-events-2.4.2",
"argo-rollouts-2.34.1",
"argo-workflows-0.40.4",
"argocd-image-updater-0.9.2",
"argo-cd-5.52.1",
"argo-cd-5.52.0",
"argo-workflows-0.40.3",
"argo-workflows-0.40.2",
"argo-rollouts-2.34.0",
"argo-workflows-0.40.1",
"argo-rollouts-2.33.0",
"argo-workflows-0.40.0",
"argo-rollouts-2.32.8",
"argo-workflows-0.39.9",
"argo-workflows-0.39.8",
"argo-rollouts-2.32.7",
"argo-rollouts-2.32.6",
"argo-workflows-0.39.7",
"argo-workflows-0.39.6",
"argo-cd-5.51.6",
"argo-cd-5.51.5",
"argo-rollouts-2.32.5",
"argo-workflows-0.39.5",
"argo-workflows-0.39.4",
"argo-cd-5.51.4",
"argo-cd-5.51.3",
"argo-workflows-0.39.3",
"argo-workflows-0.39.2",
"argo-workflows-0.39.1",
"argo-rollouts-2.32.4",
"argo-rollouts-2.32.3",
"argo-cd-5.51.2",
"argo-cd-5.51.1",
"argo-workflows-0.39.0",
"argo-cd-5.51.0",
"argo-workflows-0.38.0",
"argo-workflows-0.37.1",
"argo-cd-5.50.1",
"argo-cd-5.50.0",
"argo-rollouts-2.32.2",
"argo-cd-5.49.0",
"argo-cd-5.48.1",
"argo-cd-5.48.0",
"argo-cd-5.47.0",
"argo-rollouts-2.32.1",
"argo-workflows-0.37.0",
"argo-workflows-0.36.2",
"argo-workflows-0.36.1",
"argo-workflows-0.36.0",
"argo-workflows-0.35.0",
"argo-workflows-0.34.0",
"argo-cd-5.46.8",
"argo-cd-5.46.7",
"argo-cd-5.46.6",
"argo-cd-5.46.5",
"argo-cd-5.46.4",
"argo-cd-5.46.3",
"argo-cd-5.46.2",
"argo-cd-5.46.1",
"argo-workflows-0.33.3",
"argo-cd-5.46.0",
"argo-cd-5.45.5",
"argo-cd-5.45.4",
"argo-workflows-0.33.2",
"argo-cd-5.45.3",
"argo-cd-5.45.2",
"argo-rollouts-2.32.0",
"argo-cd-5.45.1",
"argo-events-2.4.1",
"argo-cd-5.45.0",
"argo-cd-5.44.0",
"argo-cd-5.43.8",
"argo-cd-5.43.7",
"argo-cd-5.43.6",
"argo-cd-5.43.5",
"argo-workflows-0.33.1",
"argo-workflows-0.33.0",
"argo-workflows-0.32.3",
"argo-rollouts-2.31.6",
"argo-cd-5.43.4",
"argo-workflows-0.32.2",
"argo-cd-5.43.3",
"argo-cd-5.43.2",
"argo-cd-5.43.1",
"argo-rollouts-2.31.5",
"argo-cd-5.43.0",
"argo-cd-5.42.3",
"argo-rollouts-2.31.4",
"argo-cd-5.42.2",
"argo-rollouts-2.31.3",
"argo-cd-5.42.1",
"argo-cd-5.42.0",
"argo-workflows-0.32.1",
"argo-cd-5.41.2",
"argo-rollouts-2.31.2",
"argocd-apps-1.4.1",
"argocd-apps-1.4.0",
"argo-workflows-0.32.0",
"argo-rollouts-2.31.1",
"argo-cd-5.41.1",
"argo-cd-5.41.0",
"argo-cd-5.40.0",
"argo-cd-5.39.1",
"argo-cd-5.39.0",
"argocd-apps-1.3.0",
"argo-cd-5.38.1",
"argo-workflows-0.31.0",
"argo-cd-5.38.0",
"argo-cd-5.37.1",
"argo-cd-5.37.0",
"argo-cd-5.36.15",
"argo-cd-5.36.14",
"argo-cd-5.36.13",
"argo-cd-5.36.12",
"argo-cd-5.36.11",
"argo-cd-5.36.10",
"argo-cd-5.36.9",
"argo-workflows-0.30.0",
"argo-workflows-0.29.3",
"argo-cd-5.36.7",
"argo-cd-5.36.6",
"argo-events-2.4.0",
"argo-cd-5.36.5",
"argo-cd-5.36.4",
"argo-cd-5.36.3",
"argo-cd-5.36.2",
"argo-cd-5.36.1",
"argo-workflows-0.29.2",
"argo-cd-5.36.0",
"argo-cd-5.35.1",
"argo-cd-5.35.0",
"argo-workflows-0.29.1",
"argo-rollouts-2.31.0",
"argo-workflows-0.29.0",
"argo-cd-5.34.6",
"argo-rollouts-2.30.1",
"argo-workflows-0.28.2",
"argo-workflows-0.28.1",
"argo-cd-5.34.5",
"argo-cd-5.34.4",
"argo-rollouts-2.30.0",
"argo-cd-5.34.3",
"argo-cd-5.34.2",
"argocd-apps-1.2.0",
"argo-rollouts-2.29.0",
"argo-workflows-0.28.0",
"argocd-apps-1.1.0",
"argo-cd-5.34.1",
"argo-cd-5.34.0",
"argo-cd-5.33.4",
"argo-cd-5.33.3",
"argo-cd-5.33.2",
"argo-cd-5.33.1",
"argo-workflows-0.27.0",
"argo-cd-5.33.0",
"argo-workflows-0.26.6",
"argocd-apps-1.0.1",
"argocd-image-updater-0.9.1",
"argo-events-2.3.3",
"argo-rollouts-2.28.0",
"argo-workflows-0.26.5",
"argo-cd-5.32.2",
"argo-workflows-0.26.4",
"argo-workflows-0.26.3",
"argo-events-2.3.2",
"argo-workflows-0.26.2",
"argo-cd-5.32.1",
"argo-events-2.3.1",
"argo-workflows-0.26.1",
"argo-rollouts-2.27.0",
"argo-events-2.3.0",
"argo-cd-5.32.0",
"argo-workflows-0.26.0",
"argo-workflows-0.25.2",
"argo-cd-5.31.1",
"argo-cd-5.31.0",
"argo-cd-5.30.1",
"argo-cd-5.30.0",
"argo-rollouts-2.26.1",
"argocd-apps-1.0.0",
"argo-workflows-0.25.1",
"argo-rollouts-2.26.0",
"argo-workflows-0.25.0",
"argocd-image-updater-0.9.0",
"argo-workflows-0.24.1",
"argo-rollouts-2.25.0",
"argo-cd-5.29.1",
"argo-events-2.2.0",
"argo-rollouts-2.24.0",
"argo-cd-5.29.0",
"argo-workflows-0.24.0",
"argo-workflows-0.23.2",
"argo-workflows-0.23.1",
"argo-cd-5.28.2",
"argo-events-2.1.6",
"argo-workflows-0.23.0",
"argo-cd-5.28.1",
"argocd-image-updater-0.8.5",
"argo-workflows-0.22.16",
"argo-cd-5.28.0",
"argo-events-2.1.5",
"argo-cd-5.27.5",
"argo-rollouts-2.23.0",
"argo-cd-5.27.4",
"argo-cd-5.27.3",
"argo-cd-5.27.2",
"argo-workflows-0.22.15",
"argo-cd-5.27.1",
"argo-workflows-0.22.14",
"argo-cd-5.27.0",
"argo-cd-5.26.3",
"argo-events-2.1.4",
"argo-cd-5.26.2",
"argo-cd-5.26.1",
"argo-cd-5.26.0",
"argo-cd-5.25.0",
"argo-cd-5.24.4",
"argo-cd-5.24.3",
"argo-cd-5.24.2",
"argo-cd-5.24.1",
"argo-rollouts-2.22.3",
"argocd-apps-0.0.9",
"argo-cd-5.24.0",
"argo-cd-5.23.5",
"argo-cd-5.23.4",
"argo-cd-5.23.3",
"argo-cd-5.23.2",
"argo-workflows-0.22.13",
"argo-cd-5.23.1",
"argo-workflows-0.22.12",
"argo-cd-5.23.0",
"argo-events-2.1.3",
"argo-cd-5.22.1",
"argo-cd-5.22.0",
"argo-cd-5.21.1",
"argo-cd-5.21.0",
"argo-cd-5.20.5",
"argo-cd-5.20.4",
"argo-workflows-0.22.11",
"argocd-apps-0.0.8",
"argo-cd-5.20.3",
"argo-cd-5.20.2",
"argo-cd-5.20.1",
"argo-workflows-0.22.10",
"argo-cd-5.20.0",
"argo-cd-5.19.15",
"argo-cd-5.19.14",
"argo-cd-5.19.13",
"argocd-image-updater-0.8.4",
"argocd-apps-0.0.7",
"argo-rollouts-2.22.2",
"argo-events-2.1.2",
"argocd-image-updater-0.8.3",
"argo-workflows-0.22.9",
"argo-cd-5.19.12",
"argo-events-2.1.1",
"argo-cd-5.19.11",
"argo-cd-5.19.10",
"argo-cd-5.19.9",
"argo-cd-5.19.8",
"argo-cd-5.19.7",
"argo-events-2.1.0",
"argo-cd-5.19.6",
"argo-cd-5.19.5",
"argo-cd-5.19.4",
"argo-cd-5.19.3",
"argo-cd-5.19.2",
"argo-cd-5.19.1",
"argocd-image-updater-0.8.2",
"argo-cd-5.19.0",
"argo-rollouts-2.22.1",
"argo-cd-5.18.1",
"argo-cd-5.18.0",
"argo-rollouts-2.22.0",
"argo-rollouts-2.21.3",
"argo-cd-5.17.4",
"argo-cd-5.17.2",
"argo-rollouts-2.21.2",
"argo-cd-5.17.1",
"argo-cd-5.17.0",
"argo-cd-5.16.15",
"argo-workflows-0.22.8",
"argo-cd-5.16.14",
"argo-workflows-0.22.7",
"argo-workflows-0.22.6",
"argo-events-2.0.11",
"argo-workflows-0.22.5",
"argo-cd-5.16.13",
"argo-cd-5.16.12",
"argo-cd-5.16.11",
"argo-cd-5.16.10",
"argocd-apps-0.0.6",
"argo-events-2.0.10",
"argo-workflows-0.22.4",
"argo-cd-5.16.9",
"argo-cd-5.16.8",
"argo-workflows-0.22.3",
"argo-workflows-0.22.2",
"argo-cd-5.16.7",
"argo-events-2.0.9",
"argo-events-2.0.8",
"argo-cd-5.16.6",
"argo-cd-5.16.5",
"argo-cd-5.16.4",
"argo-cd-5.16.3",
"argocd-apps-0.0.5",
"argo-events-2.0.7",
"argo-workflows-0.22.1",
"argo-cd-5.16.2",
"argo-cd-5.16.1",
"argo-workflows-0.22.0",
"argocd-apps-0.0.4",
"argo-workflows-0.21.0",
"argo-cd-5.16.0",
"argo-cd-5.15.2",
"argo-cd-5.15.1",
"argo-workflows-0.20.12",
"argo-cd-5.15.0",
"argo-cd-5.14.3",
"argo-workflows-0.20.11",
"argo-cd-5.14.2",
"argo-workflows-0.20.10",
"argo-workflows-0.20.9",
"argo-cd-5.14.1",
"argo-cd-5.14.0",
"argo-cd-5.13.9",
"argo-workflows-0.20.8",
"argo-cd-5.13.8",
"argo-cd-5.13.7",
"argo-workflows-0.20.7",
"argo-cd-5.13.6",
"argo-cd-5.13.5",
"argo-cd-5.13.4",
"argo-cd-5.13.3",
"argo-cd-5.13.2",
"argo-cd-5.13.1",
"argo-cd-5.13.0",
"argo-cd-5.12.3",
"argo-workflows-0.20.6",
"argo-cd-5.12.2",
"argo-cd-5.12.1",
"argo-cd-5.12.0",
"argo-cd-5.11.0",
"argo-cd-5.10.0",
"argo-cd-5.9.1",
"argo-cd-5.9.0",
"argo-cd-5.8.7",
"argo-cd-5.8.6",
"argo-cd-5.8.5",
"argo-cd-5.8.4",
"argo-cd-5.8.3",
"argo-workflows-0.20.5",
"argo-cd-5.8.2",
"argo-cd-5.8.1",
"argo-cd-5.8.0",
"argo-cd-5.7.0",
"argo-cd-5.6.8",
"argo-cd-5.6.7",
"argo-cd-5.6.6",
"argo-workflows-0.20.4",
"argo-cd-5.6.5",
"argo-cd-5.6.4",
"argo-workflows-0.20.3",
"argo-cd-5.6.3",
"argo-workflows-0.20.2",
"argo-cd-5.6.2",
"argo-cd-5.6.1",
"argo-cd-5.6.0",
"argocd-apps-0.0.3",
"argo-cd-5.5.25",
"argo-cd-5.5.24",
"argo-cd-5.5.23",
"argocd-apps-0.0.2",
"argo-cd-5.5.22",
"argocd-image-updater-0.8.1",
"argo-cd-5.5.21",
"argo-cd-5.5.20",
"argo-cd-5.5.19",
"argo-cd-5.5.18",
"argo-cd-5.5.17",
"argo-cd-5.5.16",
"argo-cd-5.5.15",
"argo-cd-5.5.14",
"argo-cd-5.5.13",
"argo-cd-5.5.12",
"argo-cd-5.5.11",
"argo-cd-5.5.10",
"argo-cd-5.5.9",
"argo-cd-5.5.8",
"argo-workflows-0.20.1",
"argo-rollouts-2.21.1",
"argo-cd-5.5.7",
"argo-events-2.0.6",
"argo-rollouts-2.21.0",
"argo-workflows-0.20.0",
"argo-cd-5.5.6",
"argo-workflows-0.19.6",
"argo-workflows-0.19.5",
"argo-workflows-0.19.4",
"argo-workflows-0.19.3",
"argo-cd-5.5.5",
"argo-workflows-0.19.2",
"argo-cd-5.5.4",
"argo-cd-5.5.3",
"argo-cd-5.5.2",
"argo-cd-5.5.1",
"argo-workflows-0.19.1",
"argo-cd-5.5.0",
"argo-workflows-0.19.0",
"argo-cd-5.4.8",
"argo-events-2.0.5",
"argo-cd-5.4.7",
"argo-workflows-0.18.0",
"argo-cd-5.4.6",
"argo-cd-5.4.5",
"argo-cd-5.4.4",
"argo-cd-5.4.3",
"argo-cd-5.4.2",
"argo-cd-5.4.1",
"argo-cd-5.4.0",
"argo-rollouts-2.20.0",
"argo-cd-5.3.6",
"argo-cd-5.3.5",
"argo-workflows-0.17.1",
"argo-rollouts-2.19.2",
"argo-events-2.0.4",
"argo-cd-5.3.4",
"argo-cd-5.3.3",
"argo-cd-5.3.2",
"argo-cd-5.3.1",
"argo-cd-5.3.0",
"argo-cd-5.2.2",
"argo-cd-5.2.1",
"argo-cd-5.2.0",
"argo-cd-5.1.0",
"argo-cd-5.0.0",
"argo-rollouts-2.19.0",
"argo-cd-4.10.9",
"argocd-apps-0.0.1",
"argo-cd-4.10.8",
"argo-cd-4.10.7",
"argo-workflows-0.17.0",
"argo-cd-4.10.6",
"argo-workflows-0.16.9",
"argo-cd-4.10.5",
"argo-cd-4.10.4",
"argo-cd-4.10.3",
"argo-cd-4.10.2",
"argo-cd-4.10.1",
"argo-workflows-0.16.8",
"argo-cd-4.10.0",
"argo-cd-4.9.16",
"argo-cd-4.9.15",
"argo-rollouts-2.18.0",
"argo-cd-4.9.14",
"argo-cd-4.9.13",
"argo-workflows-0.16.7",
"argo-cd-4.9.12",
"argo-events-2.0.3",
"argo-events-2.0.2",
"argo-cd-4.9.11",
"argo-cd-4.9.10",
"argo-cd-4.9.9",
"argo-events-2.0.1",
"argo-cd-4.9.8",
"argo-workflows-0.16.6",
"argo-workflows-0.16.5",
"argo-cd-4.9.7",
"argo-workflows-0.16.4",
"argo-cd-4.9.6",
"argo-cd-4.9.5",
"argo-rollouts-2.17.0",
"argo-cd-4.9.4",
"argo-cd-4.9.3",
"argo-cd-4.9.2",
"argo-events-2.0.0",
"argo-cd-4.9.1",
"argo-cd-4.9.0",
"argo-workflows-0.16.3",
"argo-cd-4.8.3",
"argo-cd-4.8.2",
"argo-cd-4.8.1",
"argo-workflows-0.16.2",
"argo-rollouts-2.16.0",
"argo-cd-4.8.0",
"argo-rollouts-2.15.0",
"argo-workflows-0.16.1",
"argo-cd-4.7.0",
"argo-workflows-0.16.0",
"argo-workflows-0.15.4",
"argo-rollouts-2.14.1",
"argo-cd-4.6.5",
"argo-cd-4.6.4",
"argo-workflows-0.15.3",
"argo-workflows-0.15.2",
"argo-workflows-0.15.1",
"argo-cd-4.6.3",
"argo-cd-4.6.2",
"argo-cd-4.6.1",
"argo-cd-4.6.0",
"argo-workflows-0.15.0",
"argo-workflows-0.14.5",
"argo-workflows-0.14.4",
"argo-workflows-0.14.3",
"argo-workflows-0.14.2",
"argo-cd-4.5.12",
"argo-cd-4.5.11",
"argo-cd-4.5.10",
"argo-cd-4.5.9",
"argo-workflows-0.14.1",
"argo-cd-4.5.8",
"argo-events-1.13.0",
"argo-cd-4.5.7",
"argocd-notifications-1.8.1",
"argocd-applicationset-1.12.1",
"argo-cd-4.5.6",
"argocd-applicationset-1.12.0",
"argo-workflows-0.14.0",
"argo-cd-4.5.5",
"argo-cd-4.5.4",
"argo-cd-4.5.3",
"argo-cd-4.5.2",
"argo-cd-4.5.1",
"argo-rollouts-2.14.0",
"argo-cd-4.5.0",
"argo-cd-4.4.1",
"argo-rollouts-2.13.0",
"argo-cd-4.4.0",
"argo-cd-4.3.2",
"argo-cd-4.3.1",
"argo-cd-4.3.0",
"argo-cd-4.2.4",
"argo-cd-4.2.3",
"argo-rollouts-2.12.0",
"argo-workflows-0.13.1",
"argo-cd-4.2.2",
"argo-cd-4.2.1",
"argo-cd-4.2.0",
"argocd-image-updater-0.8.0",
"argo-cd-4.1.0",
"argo-cd-4.0.1",
"argo-cd-4.0.0",
"argo-rollouts-2.11.0",
"argo-cd-3.35.4",
"argo-workflows-0.13.0",
"argo-workflows-0.12.0",
"argo-cd-3.35.3",
"argo-cd-3.35.2",
"argo-cd-3.35.1",
"argo-workflows-0.11.2",
"argo-workflows-0.11.1",
"argo-cd-3.35.0",
"argo-cd-3.34.0",
"argocd-image-updater-0.7.0",
"argo-workflows-0.11.0",
"argo-cd-3.33.8",
"argo-cd-3.33.7",
"argo-rollouts-2.10.0",
"argo-events-1.12.0",
"argo-events-1.11.0",
"argocd-image-updater-0.6.3",
"argo-cd-3.33.6",
"argocd-applicationset-1.11.0",
"argocd-applicationset-1.10.0",
"argo-workflows-0.10.1",
"argo-cd-3.33.5",
"argo-cd-3.33.4",
"argo-cd-3.33.3",
"argo-cd-3.33.2",
"argocd-notifications-1.8.0",
"argo-cd-3.33.1",
"argo-cd-3.33.0",
"argo-workflows-0.10.0",
"argo-cd-3.32.1",
"argo-cd-3.32.0",
"argo-rollouts-2.9.3",
"argocd-notifications-1.7.1",
"argocd-image-updater-0.6.2",
"argocd-applicationset-1.9.1",
"argo-workflows-0.9.5",
"argo-rollouts-2.9.2",
"argo-events-1.10.2",
"argo-cd-3.31.1",
"argo-cd-3.31.0",
"argo-cd-3.30.1",
"argo-events-1.10.1",
"argo-events-1.10.0",
"argo-cd-3.30.0",
"argo-rollouts-2.9.1",
"argocd-image-updater-0.6.1",
"argo-rollouts-2.9.0",
"argo-events-1.9.0",
"argo-rollouts-2.8.1",
"argocd-applicationset-1.9.0",
"argocd-applicationset-1.8.0",
"argo-rollouts-2.8.0",
"argo-cd-3.29.5",
"argo-rollouts-2.7.0",
"argocd-notifications-1.7.0",
"argo-cd-3.29.4",
"argo-workflows-0.9.4",
"argo-cd-3.29.3",
"argo-cd-3.29.2",
"argo-cd-3.29.1",
"argocd-notifications-1.6.1",
"argo-cd-3.29.0",
"argo-cd-3.28.1",
"argo-cd-3.28.0",
"argo-rollouts-2.6.0",
"argocd-applicationset-1.7.0",
"argocd-image-updater-0.6.0",
"argo-workflows-0.9.3",
"argo-cd-3.27.1",
"argo-cd-3.27.0",
"argo-cd-3.26.12",
"argocd-notifications-1.6.0",
"argocd-image-updater-0.5.0",
"argo-cd-3.26.11",
"argo-workflows-0.9.2",
"argo-workflows-0.9.1",
"argo-workflows-0.9.0",
"argocd-image-updater-0.4.2",
"argo-workflows-0.8.3",
"argo-cd-3.26.10",
"argo-workflows-0.8.2",
"argocd-image-updater-0.4.1",
"argo-cd-3.26.9",
"argocd-image-updater-0.4.0",
"argo-rollouts-2.5.0",
"argocd-notifications-1.5.2",
"argo-cd-3.26.8",
"argo-cd-3.26.7",
"argocd-image-updater-0.3.0",
"argo-rollouts-2.4.0",
"argo-cd-3.26.6",
"argo-workflows-0.8.1",
"argo-cd-3.26.5",
"argo-cd-3.26.4",
"argo-events-1.8.0",
"argo-cd-3.26.3",
"argo-cd-3.26.2",
"argo-cd-3.26.1",
"argo-cd-3.26.0",
"argo-cd-3.25.3",
"argo-workflows-0.8.0",
"argo-rollouts-2.3.0",
"argocd-applicationset-1.6.0",
"argo-rollouts-2.2.1",
"argo-cd-3.25.2",
"argo-workflows-0.7.3",
"argo-workflows-0.7.2",
"argo-rollouts-2.2.0",
"argo-cd-3.25.1",
"argo-cd-3.25.0",
"argo-cd-3.24.0",
"argo-cd-3.23.1",
"argo-cd-3.23.0",
"argocd-notifications-1.5.1",
"argo-cd-3.22.1",
"argo-cd-3.22.0",
"argo-workflows-0.7.1",
"argo-rollouts-2.1.1",
"argocd-applicationset-1.5.1",
"argocd-applicationset-1.5.0",
"argo-cd-3.21.1",
"argo-workflows-0.7.0",
"argocd-image-updater-0.2.1",
"argo-cd-3.21.0",
"argo-workflows-0.6.0",
"argo-cd-3.20.0",
"argo-rollouts-2.1.0",
"argo-cd-3.19.0",
"argo-rollouts-2.0.2",
"argocd-image-updater-0.2.0",
"argo-cd-3.18.0",
"argocd-image-updater-0.1.1",
"argo-workflows-0.5.2",
"argo-cd-3.17.7",
"argo-workflows-0.5.1",
"argo-cd-3.17.6",
"argo-rollouts-2.0.1",
"argo-cd-3.17.5",
"argocd-notifications-1.5.0",
"argo-workflows-0.5.0",
"argocd-applicationset-1.4.0",
"argo-cd-3.17.4",
"argo-cd-3.17.3",
"argo-cd-3.17.2",
"argo-cd-3.17.1",
"argo-cd-3.17.0",
"argo-cd-3.16.0",
"argocd-notifications-1.4.4",
"argocd-applicationset-1.3.1",
"argo-cd-3.15.0",
"argo-cd-3.14.0",
"argo-cd-3.13.2",
"argocd-applicationset-1.3.0",
"argo-cd-3.13.1",
"argocd-applicationset-1.2.0",
"argo-cd-3.13.0",
"argo-workflows-0.4.2",
"argo-workflows-0.4.1",
"argocd-notifications-1.4.3",
"argocd-notifications-1.4.2",
"argo-workflows-0.4.0",
"argo-rollouts-2.0.0",
"argocd-image-updater-0.1.0",
"argo-cd-3.12.1",
"argo-cd-3.12.0",
"argocd-applicationset-1.1.0",
"argo-cd-3.11.5",
"argo-workflows-0.3.0",
"argo-cd-3.11.4",
"argo-workflows-0.2.13",
"argo-rollouts-1.0.4",
"argo-cd-3.11.3",
"argo-events-1.7.0",
"argo-cd-3.11.2",
"argo-cd-3.11.1",
"argo-cd-3.11.0",
"argo-cd-3.10.2",
"argo-cd-3.10.1",
"argo-workflows-0.2.12",
"argo-workflows-0.2.11",
"argo-workflows-0.2.10",
"argo-workflows-0.2.9",
"argo-workflows-0.2.8",
"argo-cd-3.10.0",
"argo-cd-3.9.0",
"argo-cd-3.8.2",
"argo-cd-3.8.1",
"argocd-applicationset-1.0.0",
"argo-cd-3.8.0",
"argocd-notifications-1.4.1",
"argocd-applicationset-0.1.7",
"argo-workflows-0.2.7",
"argo-rollouts-1.0.3",
"argo-events-1.6.4",
"argo-cd-3.7.2",
"argo-rollouts-1.0.2",
"argo-cd-3.7.1",
"argo-cd-3.7.0",
"argo-cd-3.6.11",
"argo-cd-3.6.10",
"argo-workflows-0.2.6",
"argo-cd-3.6.9",
"argo-workflows-0.2.5",
"argo-cd-3.6.8",
"argo-cd-3.6.7",
"argo-events-1.6.2",
"argocd-applicationset-0.1.6",
"argo-workflows-0.2.4",
"argo-workflows-0.2.3",
"argocd-notifications-1.4.0",
"argo-cd-3.6.6",
"argo-rollouts-1.0.1",
"argo-workflows-0.2.2",
"argo-cd-3.6.5",
"argo-workflows-0.2.1",
"argo-workflows-0.2.0",
"argo-events-1.6.1",
"argo-rollouts-1.0.0",
"argo-cd-3.6.4",
"argo-events-1.6.0",
"argo-cd-3.6.3",
"argo-workflows-0.1.5",
"argocd-notifications-1.3.2",
"argo-events-1.5.0",
"argo-events-1.4.3",
"argo-cd-3.6.2",
"argo-workflows-0.1.4",
"argo-rollouts-0.5.5",
"argo-workflows-0.1.3",
"argo-rollouts-0.5.4",
"argo-cd-3.6.1",
"argo-cd-3.6.0",
"argo-workflows-0.1.2",
"argo-cd-3.5.0",
"argocd-notifications-1.3.1",
"argocd-applicationset-0.1.5",
"argo-workflows-0.1.1",
"argo-rollouts-0.5.3",
"argo-events-1.4.2",
"argo-cd-3.4.1",
"argo-1.0.0",
"argo-cd-3.4.0",
"argo-cd-3.3.5",
"argo-cd-3.3.4",
"argo-cd-3.3.3",
"argo-cd-3.3.2",
"argo-cd-3.3.1",
"argo-cd-3.3.0",
"argo-cd-3.2.5",
"argo-cd-3.2.4",
"argo-cd-3.2.3",
"argo-cd-3.2.2",
"argo-cd-3.2.1",
"argo-cd-3.2.0",
"argo-cd-3.1.2",
"argo-cd-3.1.1",
"argo-cd-3.1.0",
"argo-cd-3.0.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-52814.json"
}
}
],
"modified": "2026-10-28T02:30:40.282540493Z",
"provider": "osv",
"references": [
"https://github.com/argoproj/argo-helm/blob/2653aef414ab6a5d8617af75f04190a8f7da28dc/charts/argo-workflows/templates/controller/workflow-role.yaml",
"https://github.com/argoproj/argo-helm/blob/2653aef414ab6a5d8617af75f04190a8f7da28dc/charts/argo-workflows/templates/controller/workflow-role.yaml#L45-L56",
"https://github.com/argoproj/argo-workflows/blob/5aac5a8f61f4e8273d04509dffe7d80123ff67f5/manifests/quick-start/base/agent-role.yaml",
"https://github.com/argoproj/argo-workflows/blob/5aac5a8f61f4e8273d04509dffe7d80123ff67f5/manifests/quick-start/base/artifactgc-role.yaml",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/52xxx/CVE-2024-52814.json",
"https://github.com/argoproj/argo-helm/security/advisories/GHSA-h974-w8pg-cx73",
"https://nvd.nist.gov/vuln/detail/CVE-2024-52814"
],
"provider_metadata": {
"cwe_ids": [
"CWE-1220"
],
"cna_assigner": "GitHub_M",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/52xxx/CVE-2024-52814.json"
}
},
"related_cves": [
{
"value": "CVE-2024-52814",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 508009,
"published_at": "2024-11-22T15:53:06.238+00:00"
}