537 matches found
GO-2025-4223 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, argo-workflows...
GO-2026-4350 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, argo-workflows...
GO-2024-2962 vulnerabilities
Vulnerabilities for packages: newrelic-fluent-bit-output, kubeflow-katib, argo-workflows...
GO-2026-5751 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, argo-workflows...
GO-2025-4023 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, argo-workflows...
GO-2026-5235 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, argo-workflows...
GO-2026-5527 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, argo-workflows...
GO-2024-2605 vulnerabilities
Vulnerabilities for packages: step-ca, trillian, step, kots, argo-workflows, caddy...
GO-2025-3525 vulnerabilities
Vulnerabilities for packages: kargo, argo-rollouts, kubeflow-pipelines, opentelemetry-collector-contrib, splunk-otel-collector, amazon-cloudwatch-agent, grafana-alloy, k8sgpt, argo-workflows, nats, opentelemetry-collector...
GO-2024-2606 vulnerabilities
Vulnerabilities for packages: kine, kube-bench, spicedb, step-ca, ferretdb, k3s, trillian, temporal-server, src, kots, step, argo-workflows, caddy, amass...
GO-2024-2918 vulnerabilities
Vulnerabilities for packages: spire-server, falcoctl, argo-events, grafana-mimir, trivy, opentelemetry-collector-contrib, druid, step, terragrunt, buildkitd, rclone, zot, sigstore-scaffolding, flux-source-controller, fulcio, hugo-extended, sqlpad, airflow, tekton-chains, flux-kustomize-controller...
GO-2023-2334 vulnerabilities
Vulnerabilities for packages: cloudflared, spire-server, vexctl, oauth2-proxy, terragrunt, flux-source-controller, fulcio, slsa-verifier, tekton-chains, flux-kustomize-controller, gitsign, tkn, argo-workflows, rekor, aactl, kubescape, dex, sops, kots, cosign...
EUVD-2026-45029
Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list Incomplete fix for CVE-2026-31892...
GHSA-48P8-G2FX-3WWM Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list (Incomplete fix for CVE-2026-31892)
Summary The allow-list fix for CVE-2026-31892 GHSA-3wf5-g532-rcrr, and its follow-up coverage of hostNetwork/securityContext/serviceAccountName in GHSA-3775-99mw-8rp4, is incomplete. workflow/util/merge.go ValidateUserOverrides / SanitizeUserWorkflowSpec walk only the top-level fields of...
Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list (Incomplete fix for CVE-2026-31892)
Summary The allow-list fix for CVE-2026-31892 GHSA-3wf5-g532-rcrr, and its follow-up coverage of hostNetwork/securityContext/serviceAccountName in GHSA-3775-99mw-8rp4, is incomplete. workflow/util/merge.go ValidateUserOverrides / SanitizeUserWorkflowSpec walk only the top-level fields of...
CLEANSTART-2026-EU00318 Security fixes in argo-workflows 3.7.17-r1
Package argo-workflows version 3.7.17-r1 fixes 16 vulnerabilities: ghsa-3ppc-4f35-3m26, ghsa-7r86-cg39-jmmj, ghsa-23c5-xmqv-rm74, ghsa-xv26-6w52-cph6, ghsa-q3j6-qgpj-74h6...
CLEANSTART-2026-GP43617 Security fixes in argo-workflows 3.7.17-r2
Package argo-workflows version 3.7.17-r2 fixes 1 vulnerabilities: ghsa-259r-337f-4rfw...
CLEANSTART-2026-QH76136 Security fixes in argo-workflows-fips 4.0.6-r1
Package argo-workflows-fips version 4.0.6-r1 fixes 8 vulnerabilities: ghsa-crhj-59gh-8x96, ghsa-389r-gv7p-r3rp, ghsa-m7cr-m3pv-hgrp, ghsa-w5pp-99ch-qj29, CVE-2026-45022...