CLEANSTART-2026-CW68169 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Multiple security vulnerabilities affect the argo-workflows package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

GHSA-76P8-FHRM-VPC7 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, amass, crossplane-provider-aws-sns, kubelet-csr-approver, kubernetes-csi-external-resizer, cloud-provider-azure, neuvector-dbgen, flux-notification-controller, nri-prometheus, atlantis, terraform-provider-grafana, prometheus-operator,...

GO-2026-5527 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-driver-fips, kubeflow-pipelines-fips, argo-workflows-fips, kubeflow-pipelines, argo-workflows...

GO-2026-4678 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows-fips, argo-workflows...

GO-2026-5148 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-driver-fips, kubeflow-pipelines-fips, argo-workflows-fips, kubeflow-pipelines, argo-workflows...

GO-2026-4350 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows-fips, argo-workflows...

GO-2025-4024 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows-fips, argo-workflows...

GO-2025-4223 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows-fips, argo-workflows...

GO-2024-3303 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, argo-workflows...

GO-2026-5235 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-driver-fips, kubeflow-pipelines-fips, argo-workflows-fips, kubeflow-pipelines, argo-workflows...

GO-2025-4023 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows-fips, argo-workflows...

GO-2024-2962 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, newrelic-fluent-bit-output, argo-workflows...

GO-2024-2605 vulnerabilities

Vulnerabilities for packages: kots, wavefront-collector-for-kubernetes, trillian, caddy, trillian-fips, argo-workflows-fips, step-ca, step, caddy-fips, argo-workflows...

GO-2026-5751 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-driver-fips, kubeflow-pipelines-fips, argo-workflows-fips, kubeflow-pipelines, argo-workflows...

GO-2024-3303 vulnerabilities

Vulnerabilities for packages: argo-workflows...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: kargo, pulumi-language-dotnet, skaffold, bom, nuclei, flux, chezmoi, syft, grafana-alloy, pulumi-language-java, kubevela, go-licenses, dagger, k9s, melange, scorecard, src-fingerprint, flux-image-automation-controller, grype, timoni, kaniko, gitea, trivy, task,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: kargo, pulumi-language-dotnet, skaffold, bom, nuclei, flux, chezmoi, syft, grafana-alloy, pulumi-language-java, kubevela, go-licenses, dagger, k9s, melange, scorecard, src-fingerprint, flux-image-automation-controller, grype, timoni, kaniko, gitea, trivy, task,...

GO-2026-5148 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-pipelines...

GO-2026-4350 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-pipelines...

GO-2025-4024 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-pipelines...