GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: prometheus, fscrypt, osv-scanner, spire-server, snyk-cli, docker-machine-driver-harvester, knative-serving, flux-source-controller, pulumi-language-java, external-secrets-operator, apko, gitlab-kas, step-issuer, step-kms-plugin, k3s, trivy-operator, witness,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: prometheus, fscrypt, kubernetes-dashboard, prometheus-operator, spire-server, snyk-cli, kaf, docker-cli-buildx, istio, knative-serving, containerd, cilium, flux, cilium-cli, external-secrets-operator, loki, external-dns, gitlab-kas, kubernetes, k3s, kyverno,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: ko, prometheus, fscrypt, osv-scanner, spire-server, snyk-cli, crossplane-provider-aws-ec2, knative-serving, crossplane-provider-aws-sqs, docker-compose, flux-source-controller, pulumi-language-java, external-secrets-operator, apko, crossplane-provider-aws-firehose,...

GO-2026-5751 Argo has Missing Authorization in its Sync ConfigMap Provider in github.com/argoproj/argo-workflows

Argo has Missing Authorization in its Sync ConfigMap Provider in github.com/argoproj/argo-workflows...

GO-2026-5527 Argo Affected by SSO RBAC Delegation Nil Pointer Dereference DoS (gatekeeper.go) in github.com/argoproj/argo-workflows

Argo Affected by SSO RBAC Delegation Nil Pointer Dereference DoS gatekeeper.go in github.com/argoproj/argo-workflows...

GO-2026-5618 Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd

Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd...

GO-2026-5462 Argo Vulnerable to Unauthenticated Memory Exhaustion (DoS) in Webhook Interceptor in github.com/argoproj/argo-workflows

Argo Vulnerable to Unauthenticated Memory Exhaustion DoS in Webhook Interceptor in github.com/argoproj/argo-workflows...

GO-2026-5418 Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd

Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd...

GO-2026-5235 Argo vulnerable to exposure of artifact repository credentials in github.com/argoproj/argo-workflows

Argo vulnerable to exposure of artifact repository credentials in github.com/argoproj/argo-workflows...

GO-2026-5099 ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction in github.com/argoproj/argo-cd

ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction in github.com/argoproj/argo-cd...

GO-2026-5148 Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows Controller in github.com/argoproj/argo-workflows

Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows Controller in github.com/argoproj/argo-workflows...

GO-2026-5072 Argo has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure in github.com/argoproj/argo-workflows

Argo has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure in github.com/argoproj/argo-workflows...

CVE-2026-9595 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, gitlab-rails-ce-fips, argo-workflows, gitlab-rails-ce...

GHSA-MX8G-39Q3-5C79 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, gitlab-rails-ce-fips, argo-workflows, gitlab-rails-ce...

CVE-2026-9595 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-katib...

GHSA-MX8G-39Q3-5C79 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-katib...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: skopeo-fips, commercial-expanso-edge, prometheus-podman-exporter, dkron, step-ca-fips, k8s-agents-operator, spire-server-fips, gatus-fips, temporal-fips, hubble-ui, beats-fips, crossplane-provider-azure-spring, verticadb-operator-fips, blob-csi-fips,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: skopeo-fips, commercial-expanso-edge, prometheus-podman-exporter, dkron, step-ca-fips, k8s-agents-operator, spire-server-fips, gatus-fips, temporal-fips, hubble-ui, beats-fips, crossplane-provider-azure-spring, verticadb-operator-fips, blob-csi-fips,...

ROOT-APP-GOBINARY-CVE-2025-62156 CVE-2025-62156 in rootio-github.com/argoproj/argo-workflows/v3 - Patched by Root

Root has patched CVE-2025-62156 in the rootio-github.com/argoproj/argo-workflows/v3 package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2025-66626 CVE-2025-66626 in rootio-github.com/argoproj/argo-workflows/v3 - Patched by Root

Root has patched CVE-2025-66626 in the rootio-github.com/argoproj/argo-workflows/v3 package for Root:Go. Multiple fixed versions available...