PT-2025-16385

Name of the Vulnerable Software and Affected Versions Argo Events versions prior to 1.9.6 Description Argo Events is an event-driven workflow automation framework for Kubernetes. A user with permission to create or modify EventSource and Sensor custom resources can gain privileged access to the...

CVE-2024-29180 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-workflows...

CVE-2025-29923 vulnerabilities

Vulnerabilities for packages: gitea, atlantis, splunk-otel-collector, authservice, fluent-bit-plugin-loki, oauth2-proxy, kots, falcosidekick...

CVE-2024-21536 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, kubeflow-pipelines, argo-workflows...

GHSA-92CP-5422-2MW7 vulnerabilities

Vulnerabilities for packages: gitea, atlantis, splunk-otel-collector, authservice, fluent-bit-plugin-loki, oauth2-proxy, kots, falcosidekick...

GHSA-WR3J-PWJ9-HQQ6 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-workflows...

GHSA-C7QV-Q95Q-8V27 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, kubeflow-pipelines, argo-workflows...

CVE-2024-29180 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-workflows, arangodb...

GHSA-CWPG-QGC6-JXVQ vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-workflows, newrelic-fluent-bit-output...

GHSA-WR3J-PWJ9-HQQ6 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-workflows, arangodb...

CVE-2025-29923 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib-fips, atlantis, authservice, dapr, argo-cd-fips, oauth2-proxy, traefik-fips, kots, fluent-bit-plugin-loki, gitea-fips, splunk-otel-collector-fips, falcosidekick, gitea, rekor-fips, splunk-otel-collector, keda, loki, loki-fips,...

CVE-2024-21536 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-workflows, arangodb, kubeflow-pipelines...

GHSA-92CP-5422-2MW7 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib-fips, atlantis, authservice, dapr, argo-cd-fips, oauth2-proxy, traefik-fips, kots, fluent-bit-plugin-loki, gitea-fips, splunk-otel-collector-fips, falcosidekick, gitea, rekor-fips, splunk-otel-collector, keda, loki, loki-fips,...

GHSA-C7QV-Q95Q-8V27 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-workflows, arangodb, kubeflow-pipelines...

CVE-2023-24531 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-workflows, newrelic-fluent-bit-output...

CVE-2025-29786 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, amazon-cloudwatch-agent, kargo, k8sgpt, kubeflow-pipelines, argo-workflows, grafana-alloy, argo-rollouts, opentelemetry-collector, opentelemetry-collector-contrib, nats...

GHSA-93MQ-9FFX-83M2 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, amazon-cloudwatch-agent, kargo, k8sgpt, kubeflow-pipelines, argo-workflows, grafana-alloy, argo-rollouts, opentelemetry-collector, opentelemetry-collector-contrib, nats...

CVE-2025-29786 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib-fips, k8sgpt, argo-rollouts-fips, argo-cd-fips, opentelemetry-collector-fips, argo-rollouts, eks-distro, kubeflow-pipelines, opentelemetry-collector-contrib, nats, argo-workflows, grafana-alloy, splunk-otel-collector-fips,...

GHSA-93MQ-9FFX-83M2 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib-fips, k8sgpt, argo-rollouts-fips, argo-cd-fips, opentelemetry-collector-fips, argo-rollouts, eks-distro, kubeflow-pipelines, opentelemetry-collector-contrib, nats, argo-workflows, grafana-alloy, splunk-otel-collector-fips,...

GHSA-QXP5-GWG8-XV66 vulnerabilities

Vulnerabilities for packages: controller-gen, cadvisor, azcopy-fips, opentelemetry-collector-fips, consul-k8s, crossplane-provider-aws-kms, temporal-ui-server, restic-fips, octo-sts, docker-compose, amazon-k8s-cni, harbor-scanner-trivy-fips, pluto, rabbitmq-cluster-operator, fulcio, slsa-verifier...