772 matches found
CVE-2025-7339 vulnerabilities
Vulnerabilities for packages: json-server, kubeflow-centraldashboard, serve, argo-workflows, code-server, sqlpad, thingsboard, kubeflow-katib, tileserver-gl...
CVE-2025-7339 vulnerabilities
Vulnerabilities for packages: argo-workflows, gitlab-rails-ce, serve, sqlpad, kubeflow-katib, tileserver-gl-fips, json-server, vitess, code-server, kubeflow-centraldashboard, arangodb, gitlab-rails-ce-fips, thingsboard, tileserver-gl...
GHSA-76C9-3JPH-RJ3Q vulnerabilities
Vulnerabilities for packages: argo-workflows, gitlab-rails-ce, serve, sqlpad, kubeflow-katib, tileserver-gl-fips, json-server, vitess, code-server, kubeflow-centraldashboard, arangodb, gitlab-rails-ce-fips, thingsboard, tileserver-gl...
CVE-2025-30360 vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-katib...
CVE-2025-30359 vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-katib...
GHSA-9JGG-88MC-972H vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-katib...
GHSA-4V9V-HFQ4-RM2V vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-katib...
CVE-2025-30359 vulnerabilities
Vulnerabilities for packages: argo-workflows, gitlab-rails-ce, kubeflow-katib, arangodb, gitlab-rails-ce-fips...
CVE-2025-30360 vulnerabilities
Vulnerabilities for packages: argo-workflows, gitlab-rails-ce, kubeflow-katib, arangodb, gitlab-rails-ce-fips...
GHSA-4V9V-HFQ4-RM2V vulnerabilities
Vulnerabilities for packages: argo-workflows, gitlab-rails-ce, kubeflow-katib, arangodb, gitlab-rails-ce-fips...
GHSA-9JGG-88MC-972H vulnerabilities
Vulnerabilities for packages: argo-workflows, gitlab-rails-ce, kubeflow-katib, arangodb, gitlab-rails-ce-fips...
GHSA-V6H2-P8H4-QCJW vulnerabilities
Vulnerabilities for packages: kubeflow-centraldashboard, pulumi, renovate, kubeflow-pipelines, ts-patch, langfuse, prism, vitess, jupyter-base-notebook, code-server, eslint, node-gyp, lerna, py3-jupyterlab, rancher-api-ui, npm, argo-workflows, sqlpad, opensearch-dashboards, tileserver-gl...
CVE-2025-5889 vulnerabilities
Vulnerabilities for packages: kubeflow-centraldashboard, pulumi, renovate, kubeflow-pipelines, ts-patch, langfuse, prism, vitess, jupyter-base-notebook, code-server, eslint, node-gyp, lerna, py3-jupyterlab, rancher-api-ui, npm, argo-workflows, sqlpad, opensearch-dashboards, tileserver-gl...
GHSA-V6H2-P8H4-QCJW vulnerabilities
Vulnerabilities for packages: argo-workflows, gitlab-rails-ce, jupyter-base-notebook, sqlpad, tensorflow-cpu-jupyter, bash-language-server, kibana, emsdk, eslint, npm, node-gyp, langfuse, graalvm, kubeflow-pipelines, tileserver-gl-fips, vitess, opensearch-dashboards, code-server,...
CVE-2025-5889 vulnerabilities
Vulnerabilities for packages: argo-workflows, gitlab-rails-ce, jupyter-base-notebook, sqlpad, tensorflow-cpu-jupyter, bash-language-server, kibana, emsdk, eslint, npm, node-gyp, langfuse, graalvm, kubeflow-pipelines, tileserver-gl-fips, vitess, opensearch-dashboards, code-server,...
CVE-2024-52799
Argo Workflows Chart is used to set up argo and its needed dependencies through one command. Prior to 0.44.0, the workflow-role has excessive privileges, the worst being create pods/exec, which will allow kubectl exec into any Pod in the same namespace, i.e. arbitrary code execution within those...
PT-2025-41938
Name of the Vulnerable Software and Affected Versions Argo Workflows versions prior to 3.6.12 Argo Workflows versions 3.7.0 through 3.7.2 Description Argo Workflows is a container-native workflow engine for Kubernetes. Versions prior to 3.6.12 and versions 3.7.0 through 3.7.2 expose artifact...
BIT-ARGO-WORKFLOWS-2024-53862 Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. When using --auth-mode=client, Archived Workflows can be retrieved with a fake or spoofed token via the GET Workflow endpoint: /api/v1/workflows/namespace/name or when using...