772 matches found
GHSA-C7QV-Q95Q-8V27 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, kubeflow-katib, argo-workflows...
GHSA-WR3J-PWJ9-HQQ6 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, argo-workflows...
GHSA-WR3J-PWJ9-HQQ6 vulnerabilities
Vulnerabilities for packages: argo-workflows, arangodb, kubeflow-katib...
GHSA-C7QV-Q95Q-8V27 vulnerabilities
Vulnerabilities for packages: argo-workflows, arangodb, kubeflow-katib, kubeflow-pipelines...
CVE-2024-21536 vulnerabilities
Vulnerabilities for packages: argo-workflows, arangodb, kubeflow-katib, kubeflow-pipelines...
CVE-2024-29180 vulnerabilities
Vulnerabilities for packages: argo-workflows, arangodb, kubeflow-katib...
GHSA-CWPG-QGC6-JXVQ vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-katib, newrelic-fluent-bit-output...
CVE-2023-24531 vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-katib, newrelic-fluent-bit-output...
GHSA-93MQ-9FFX-83M2 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector, splunk-otel-collector, argo-rollouts, k8sgpt, opentelemetry-collector-contrib, kubeflow-pipelines, grafana-alloy, kargo, argo-workflows, nats, amazon-cloudwatch-agent...
CVE-2025-29786 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector, splunk-otel-collector, argo-rollouts, k8sgpt, opentelemetry-collector-contrib, kubeflow-pipelines, grafana-alloy, kargo, argo-workflows, nats, amazon-cloudwatch-agent...
GHSA-93MQ-9FFX-83M2 vulnerabilities
Vulnerabilities for packages: kargo, k8sgpt, argo-workflows, grafana-alloy, grafana-alloy-fips, argo-rollouts-fips, nats, eks-distro, argo-cd, argo-rollouts, amazon-cloudwatch-agent-fips, keda, opentelemetry-collector-fips, opentelemetry-collector, eks-distro-fips, argo-cd-fips,...
GHSA-67MH-4WV8-2F99 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, vite, gitlab-rails-ce, argo-workflows, gitlab-rails-ce-fips...
GHSA-67MH-4WV8-2F99 vulnerabilities
Vulnerabilities for packages: vite, kubeflow-katib, argo-workflows...
CVE-2022-29164
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. In affected versions an attacker can create a workflow which produces a HTML artifact containing an HTML file that contains a script which uses XHR calls to interact with the Argo Serv...
GHSA-CWPG-QGC6-JXVQ vulnerabilities
Vulnerabilities for packages: newrelic-fluent-bit-output, kubeflow-katib, argo-workflows...
CVE-2025-21614 vulnerabilities
Vulnerabilities for packages: pulumi, scorecard, kaniko-fips, go-licenses, flux-image-automation-controller, snyk-cli, src-fingerprint-fips, syft, gitea, gptscript, k8sgpt, flux-source-controller-fips, kargo, argo-workflows, tekton-pipelines, grafana-alloy, amazon-ssm-agent, bom,...
Sensitive Information Exposure
github.com/argoproj/argo-workflows/v3 is vulnerable to a Sensitive Information Exposure. The vulnerability is due to the absence of proper authentication checks in the GET Workflow endpoint when retrieving Archived Workflows. Specifically, when using --auth-mode=client, fake or spoofed tokens can...
SUSE CVE-2024-53862
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. When using --auth-mode=client, Archived Workflows can be retrieved with a fake or spoofed token via the GET Workflow endpoint: /api/v1/workflows/namespace/name or when using...