CVE's for image quay.io/argoproj/argocd:v2.9.0

[srikanthopsmx]

Hi
I want to no is there CVE fixes is there for image quay.io/argoproj/argocd:v2.9.0
we observed many cve while trivy scan this image
Can any one know these are fixed in any higher version
below are some of cves

CVE-2024-22424 HIGH
CVE-2023-49569 CRITICAL
CVE-2023-49568 HIGH
CVE-2023-46402 HIGH
CVE-2023-47108 HIGH
CVE-2023-39325 HIGH
CVE-2023-44487 HIGH
CVE-2023-3676 HIGH
CVE-2023-3955 HIGH
CVE-2023-5528 HIGH
CVE-2024-24790 CRITICAL
CVE-2023-45283 HIGH
CVE-2024-24557 HIGH

[rumstead]

v2.9 is EOL so I would suggest upgrading regardless.

Argo publishes snyk reports on the docs page.

[srikanthopsmx]

thanks for response rumstead

[srikanthopsmx]

is there any report for argo rollouts quay.io/argoproj/argo-rollouts:v1.6.3