1772 matches found
GHSA-X527-X647-Q7GG vulnerabilities
Vulnerabilities for packages: helm, telegraf, gitlab-kas, spire-server, gitea, istio, zot, cloud-provider-aws, trivy-operator, flux-image-automation-controller, kubescape, external-dns, kubernetes, kaf, containerd, opentelemetry-collector, zarf, aactl, minio, nerdctl, loki, skaffold, prometheus,...
GHSA-45GG-VH54-H5M9 vulnerabilities
Vulnerabilities for packages: helm, telegraf, gitlab-kas, spire-server, gitea, istio, zot, cloud-provider-aws, trivy-operator, flux-image-automation-controller, kubescape, docker-machine-driver-harvester, external-dns, kubernetes, kaf, containerd, opentelemetry-collector, zarf, aactl, minio,...
GHSA-QPW4-5X99-6VJP vulnerabilities
Vulnerabilities for packages: act, helm, wolfictl, splunk-otel-collector, argo-cd, gitea, rootlesskit, docker-cli-buildx, buildkitd, cloud-provider-aws, pulumi-language-yaml, external-dns, pulumi-language-dotnet, kubernetes, podman, containerd, aactl, prometheus, snyk-cli, dagger, opentofu,...
GHSA-89GR-R52H-F8RX vulnerabilities
Vulnerabilities for packages: act, helm, cosign, wolfictl, splunk-otel-collector, argo-cd, kargo, gitea, rootlesskit, docker-cli-buildx, flux-notification-controller, openbao, buildkitd, cloud-provider-aws, pulumi-language-yaml, eksctl, external-dns, pulumi-language-dotnet, kubernetes, podman,...
GHSA-F5WC-C3C7-36MC vulnerabilities
Vulnerabilities for packages: act, helm, wolfictl, argo-cd, gitea, docker-cli-buildx, openbao, cloud-provider-aws, pulumi-language-yaml, external-dns, pulumi-language-dotnet, kubernetes, podman, containerd, aactl, prometheus, snyk-cli, dagger, buildah, opentofu, prometheus-operator, caddy,...
GHSA-JPPX-RXG9-JMRX vulnerabilities
Vulnerabilities for packages: helm, telegraf, gitlab-kas, spire-server, istio, docker-cli-buildx, zot, cloud-provider-aws, external-dns, kubernetes, podman, kaf, containerd, opentelemetry-collector, aactl, minio, nerdctl, loki, prometheus, snyk-cli, kubernetes-dashboard, rancher, kine,...
GHSA-Q4H4-GMJ2-QVW2 vulnerabilities
Vulnerabilities for packages: act, helm, cosign, wolfictl, crossplane-provider-aws-firehose, splunk-otel-collector, argo-cd, kargo, gitea, docker-machine-driver-linode, terraform-provider-acme, rootlesskit, docker-cli-buildx, flux-notification-controller, openbao, buildkitd, cloud-provider-aws,...
GO-2026-5751 Argo has Missing Authorization in its Sync ConfigMap Provider in github.com/argoproj/argo-workflows
Argo has Missing Authorization in its Sync ConfigMap Provider in github.com/argoproj/argo-workflows...
GO-2026-5527 Argo Affected by SSO RBAC Delegation Nil Pointer Dereference DoS (gatekeeper.go) in github.com/argoproj/argo-workflows
Argo Affected by SSO RBAC Delegation Nil Pointer Dereference DoS gatekeeper.go in github.com/argoproj/argo-workflows...
GO-2026-5618 Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd
Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd...
GO-2026-5462 Argo Vulnerable to Unauthenticated Memory Exhaustion (DoS) in Webhook Interceptor in github.com/argoproj/argo-workflows
Argo Vulnerable to Unauthenticated Memory Exhaustion DoS in Webhook Interceptor in github.com/argoproj/argo-workflows...
GO-2026-5418 Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd
Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd...
GO-2026-5235 Argo vulnerable to exposure of artifact repository credentials in github.com/argoproj/argo-workflows
Argo vulnerable to exposure of artifact repository credentials in github.com/argoproj/argo-workflows...
GO-2026-5099 ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction in github.com/argoproj/argo-cd
ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction in github.com/argoproj/argo-cd...
GO-2026-5072 Argo has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure in github.com/argoproj/argo-workflows
Argo has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure in github.com/argoproj/argo-workflows...
GO-2026-5148 Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows Controller in github.com/argoproj/argo-workflows
Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows Controller in github.com/argoproj/argo-workflows...
CVE-2026-9595 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, argo-workflows...
GHSA-MX8G-39Q3-5C79 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, argo-workflows...