835 matches found
CVE-2026-115897 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, tileserver-gl, argo-workflows...
GHSA-M5MM-P8H7-M29V vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, tileserver-gl, argo-workflows...
CVE-2026-115897 vulnerabilities
Vulnerabilities for packages: argo-workflows, wazuh-dashboard-fips, foxx-cli, opensearch-dashboards, gitlab-rails-ce-fips, tileserver-gl, opensearch-dashboards-fips, wazuh-dashboard, arangodb, tileserver-gl-fips...
GHSA-M5MM-P8H7-M29V vulnerabilities
Vulnerabilities for packages: argo-workflows, wazuh-dashboard-fips, foxx-cli, opensearch-dashboards, gitlab-rails-ce-fips, tileserver-gl, opensearch-dashboards-fips, wazuh-dashboard, arangodb, tileserver-gl-fips...
GO-2026-6609 vulnerabilities
Vulnerabilities for packages: chartmuseum, grafana-alloy, cert-manager, cert-manager-webhook-pdns, grafana-pyroscope, falco-no-driver, hubble-ui, external-dns, kube-arangodb, filebrowser, spire-server, atlantis, prometheus-adapter, headlamp, mesosphere-vsphere-csi, terragrunt, k8s-device-plugin,...
GHSA-F4XW-M386-M277 vulnerabilities
Vulnerabilities for packages: chartmuseum, grafana-alloy, cert-manager, cert-manager-webhook-pdns, grafana-pyroscope, falco-no-driver, hubble-ui, external-dns, kube-arangodb, filebrowser, spire-server, atlantis, prometheus-adapter, headlamp, mesosphere-vsphere-csi, terragrunt, k8s-device-plugin,...
CVE-2026-97711 vulnerabilities
Vulnerabilities for packages: argo-workflows...
GHSA-GFHX-HW2G-V5HG vulnerabilities
Vulnerabilities for packages: argo-workflows...
CVE-2026-97711 vulnerabilities
Vulnerabilities for packages: argo-workflows...
GHSA-GFHX-HW2G-V5HG vulnerabilities
Vulnerabilities for packages: argo-workflows...
BIT-ARGO-WORKFLOWS-2026-93991 Argo Workflows 4.1.0 through 4.1.3 Cross-Namespace Disclosure via Negated Selector
Argo Workflows versions 4.1.0 through 4.1.3 contain an authorization bypass vulnerability in ListArchivedWorkflows that fails to apply cluster-scoped access review when the metadata.namespace field selector uses the NotEquals operator. Attackers with namespace-scoped list permissions can use a...
CLEANSTART-2026-XS33213 shell-quote prior to 1
Security vulnerability affects the argo-workflows package. shell-quote prior to 1...
CLEANSTART-2026-ZQ97544 path-to-regexp turns path strings into a regular expressions
Security vulnerability affects the argo-workflows package. path-to-regexp turns path strings into a regular expressions...
CLEANSTART-2026-QN85900 Picomatch is a glob matcher written JavaScript
Security vulnerability affects the argo-workflows package. Picomatch is a glob matcher written JavaScript...
CLEANSTART-2026-WO79894 websocket-driver is a WebSocket protocol handler with pluggable I/O
Security vulnerability affects the argo-workflows package. websocket-driver is a WebSocket protocol handler with pluggable I/O...
CLEANSTART-2026-GV24243 Serialize JavaScript to a superset of JSON that includes regular expressions and functions
Security vulnerability affects the argo-workflows package. Serialize JavaScript to a superset of JSON that includes regular expressions and functions...
CLEANSTART-2026-YT66630 webpack-dev-server allows users to use webpack with a development server that provides live reloading
Security vulnerability affects the argo-workflows package. webpack-dev-server allows users to use webpack with a development server that provides live reloading...
CLEANSTART-2026-GA82552 Babel is a compiler for writing next generation JavaScript
Security vulnerability affects the argo-workflows package. Babel is a compiler for writing next generation JavaScript...
CLEANSTART-2026-NW68824 Impact: In body-parser versions prior to 1
Security vulnerability affects the argo-workflows package. Impact: In body-parser versions prior to 1...
CLEANSTART-2026-QQ95975 Security fix for GHSA-5c6j-r48x-rmvq applied in: argo-workflows 4.0.12-r1
Security vulnerability affects the argo-workflows package. This issue is resolved in later releases. See references for vulnerability details...