CVE-2024-29180 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-katib...

CVE-2024-21536 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-katib, kubeflow-pipelines...

GHSA-WR3J-PWJ9-HQQ6 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-katib...

GHSA-C7QV-Q95Q-8V27 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-katib, kubeflow-pipelines...

CVE-2024-29180 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-katib...

GHSA-CWPG-QGC6-JXVQ vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, argo-workflows, kubeflow-katib...

GHSA-WR3J-PWJ9-HQQ6 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-katib...

CVE-2024-21536 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows, kubeflow-katib...

CVE-2023-24531 vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, argo-workflows, kubeflow-katib...

GHSA-C7QV-Q95Q-8V27 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows, kubeflow-katib...

CVE-2025-29786 vulnerabilities

Vulnerabilities for packages: argo-workflows, grafana-alloy, amazon-cloudwatch-agent, kargo, tempo, kubeflow-pipelines, opentelemetry-collector-contrib, splunk-otel-collector, argo-rollouts, opentelemetry-collector, nats, k8sgpt...

GHSA-93MQ-9FFX-83M2 vulnerabilities

Vulnerabilities for packages: argo-workflows, grafana-alloy, amazon-cloudwatch-agent, kargo, tempo, kubeflow-pipelines, opentelemetry-collector-contrib, splunk-otel-collector, argo-rollouts, opentelemetry-collector, nats, k8sgpt...

GHSA-93MQ-9FFX-83M2 vulnerabilities

Vulnerabilities for packages: argo-cd, kargo, amazon-cloudwatch-agent, kubeflow-pipelines, argo-rollouts, k8sgpt, splunk-otel-collector-fips, argo-rollouts-fips, tempo, amazon-cloudwatch-agent-fips, opentelemetry-collector-contrib, grafana-alloy-fips, opentelemetry-collector, argo-cd-fips,...

GHSA-67MH-4WV8-2F99 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-katib, vite...

GHSA-67MH-4WV8-2F99 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, kubeflow-katib, argo-workflows, gitlab-rails-ce-fips, vite...

CVE-2022-29164

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. In affected versions an attacker can create a workflow which produces a HTML artifact containing an HTML file that contains a script which uses XHR calls to interact with the Argo Serv...

GHSA-CWPG-QGC6-JXVQ vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-katib, newrelic-fluent-bit-output...

CVE-2025-21614 vulnerabilities

Vulnerabilities for packages: flux-source-controller-fips, pulumi-language-dotnet, gitea-fips, bom, trivy-fips, argo-events-fips, src-fingerprint-fips, dagger, flux-fips, gitea, gptscript, flux, goreleaser, pulumi, gitsign, task, amazon-ssm-agent, osv-scanner, chainctl, apko, argo-cd,...

Sensitive Information Exposure

github.com/argoproj/argo-workflows/v3 is vulnerable to a Sensitive Information Exposure. The vulnerability is due to the absence of proper authentication checks in the GET Workflow endpoint when retrieving Archived Workflows. Specifically, when using --auth-mode=client, fake or spoofed tokens can...

SUSE CVE-2024-53862

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. When using --auth-mode=client, Archived Workflows can be retrieved with a fake or spoofed token via the GET Workflow endpoint: /api/v1/workflows/namespace/name or when using...