772 matches found
CVE-2023-24531 vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-katib, newrelic-fluent-bit-output...
CVE-2024-35255 vulnerabilities
Vulnerabilities for packages: policy-controller, airflow, harbor-registry, k8sgpt, buildkitd, guac, zarf, up, pulumi, flux-source-controller, rclone, sops, goreleaser, cosign, tekton-chains, py3-azure-identity, cortex, chezmoi, py3-cassandra-medusa, prometheus-operator, step, zot, trivy,...
GHSA-952P-6RRQ-RCJV vulnerabilities
Vulnerabilities for packages: argo-workflows, gitlab-rails-ce, py3-captum, kubeflow-pipelines, ts-patch, kubeflow-katib, opensearch-dashboards, kibana, lerna, semaphore, arangodb, gitlab-rails-ce-fips, renovate, opensearch-dashboards-fips...
CVE-2024-4067 vulnerabilities
Vulnerabilities for packages: argo-workflows, gitlab-rails-ce, py3-captum, kubeflow-pipelines, ts-patch, kubeflow-katib, opensearch-dashboards, kibana, lerna, semaphore, arangodb, gitlab-rails-ce-fips, renovate, opensearch-dashboards-fips...
CVE-2024-28180 vulnerabilities
Vulnerabilities for packages: melange, k3s, dgraph, kube-rbac-proxy, policy-controller, guac, zarf, flux-source-controller, sops, goreleaser, cosign, tekton-chains, kubernetes-dashboard, nerdctl, step, gitsign, zot, caddy, weaviate, sigstore-scaffolding, kots, temporal-ui-server,...
CVE-2024-27304 vulnerabilities
Vulnerabilities for packages: k3s, amass, step, step-ca, caddy, ferretdb, kube-bench, spicedb, argo-workflows, trillian, kots, temporal-server, src, kine...
CVE-2024-27304 vulnerabilities
Vulnerabilities for packages: argo-workflows, temporal-server-fips, step, argo-workflows-fips, caddy-fips, amass, step-ca, temporal-server, ferretdb, wavefront-collector-for-kubernetes, kots, spicedb, kube-bench-fips, caddy, trillian-fips, falcosidekick-fips, kine, trillian, k3s, kube-bench, src...
CVE-2024-27289 vulnerabilities
Vulnerabilities for packages: step, step-ca, caddy, trillian, argo-workflows, kots...
BIT-ARGO-WORKFLOWS-2021-37914
In Argo Workflows through 3.1.3, if EXPRESSIONTEMPLATES is enabled and untrusted users are allowed to specify input parameters when running workflows, an attacker may be able to disrupt a workflow because expression template output is evaluated...
BIT-ARGO-WORKFLOWS-2022-29164 Privilege Escalation in argo-workflows
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. In affected versions an attacker can create a workflow which produces a HTML artifact containing an HTML file that contains a script which uses XHR calls to interact with the Argo Serv...
GHSA-8R3F-844C-MC37 vulnerabilities
Vulnerabilities for packages: policy-controller, timoni, kor, crossplane-provider-family-azure, secrets-store-csi-driver-provider-aws, kustomize, terraform-provider-sendgrid, pulumi, flux-source-controller, grype, crossplane-provider-aws, goreleaser, crossplane-provider-aws-cloudfront, sops,...
CVE-2024-24786 vulnerabilities
Vulnerabilities for packages: prometheus-elasticsearch-exporter-fips, boring-registry-fips, sops, ferretdb, nri-kubernetes, spicedb, terragrunt, crossplane-provider-aws-kinesis, cri-tools, vertical-pod-autoscaler, k3d, capslock, pulumi-language-java, volume-modifier-for-k8s-fips, helm-push, zarf,...
GHSA-7JWH-3VRQ-Q3M8 vulnerabilities
Vulnerabilities for packages: k3s, amass, step, step-ca, caddy, ferretdb, kube-bench, spicedb, argo-workflows, trillian, kots, temporal-server, src, kine...
GHSA-7JWH-3VRQ-Q3M8 vulnerabilities
Vulnerabilities for packages: argo-workflows, temporal-server-fips, step, argo-workflows-fips, caddy-fips, amass, step-ca, temporal-server, ferretdb, wavefront-collector-for-kubernetes, kots, spicedb, kube-bench-fips, caddy, trillian-fips, falcosidekick-fips, kine, trillian, k3s, kube-bench, src...
GHSA-MRWW-27VC-GGHV vulnerabilities
Vulnerabilities for packages: argo-workflows, temporal-server-fips, step, argo-workflows-fips, caddy-fips, amass, step-ca, temporal-server, ferretdb, wavefront-collector-for-kubernetes, kots, spicedb, kube-bench-fips, caddy, trillian-fips, falcosidekick-fips, kine, trillian, k3s, kube-bench, src...
GHSA-M7WR-2XF7-CM9P vulnerabilities
Vulnerabilities for packages: argo-workflows, step, wavefront-collector-for-kubernetes, caddy, argo-workflows-fips, trillian, kots, trillian-fips, caddy-fips, step-ca...
GHSA-XW73-RW38-6VJC vulnerabilities
Vulnerabilities for packages: argo-workflows, slsa-verifier, cadvisor, ko-fips, policy-controller-fips, kubescape, argo-workflows-fips, bom, kubevela, helm, kpt, cosign, policy-controller, k9s, k8sgpt, kargo, cadvisor-fips, chartmuseum, docker-machine-driver-harvester, helm-operator, buildkitd,...
CVE-2024-24557 vulnerabilities
Vulnerabilities for packages: argo-workflows, slsa-verifier, cadvisor, ko-fips, policy-controller-fips, kubescape, argo-workflows-fips, bom, kubevela, helm, kpt, cosign, policy-controller, k9s, k8sgpt, kargo, cadvisor-fips, chartmuseum, docker-machine-driver-harvester, helm-operator, buildkitd,...