GO-2024-2994 vulnerabilities

Vulnerabilities for packages: spark-operator, argocd-image-updater, ip-masq-agent, kubernetes-csi-driver-hostpath, local-static-provisioner, kubeflow-pipelines, cri-tools, aws-efs-csi-driver, kubernetes-dns-node-cache, k8s-device-plugin, nodetaint...

GO-2025-3437 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GO-2024-3286 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, ip-masq-agent, local-static-provisioner, kubeflow-pipelines, aws-efs-csi-driver, kubernetes-dns-node-cache, k8s-device-plugin, nodetaint...

GO-2026-5099 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GO-2024-3277 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, argocd-image-updater...

GO-2026-5094 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, kots, gitness, portieris, envoy-gateway, zot...

GO-2026-5185 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, kots, gitness, portieris, envoy-gateway, zot...

GO-2025-3934 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GO-2026-5418 vulnerabilities

Vulnerabilities for packages: argo-cd, argocd-image-updater...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, gomplate, kubevela, flux, pulumi, k9s, pulumi-language-java, trivy-operator, tfsec, trufflehog, kyverno, gitaly, syft, xeol, argo-events, teleport, guac, cerbos, src-fingerprint, zarf, snyk-cli, flux-image-automation-controller,...

GO-2025-3720 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GO-2025-3433 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GO-2026-5618 vulnerabilities

Vulnerabilities for packages: argo-cd, argocd-image-updater...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-node-driver-registrar, aactl, tigera-operator, crossplane-provider-aws-lambda, docker-machine-driver-harvester, kubernetes-csi-livenessprobe, libnvidia-container, sigstore-scaffolding, trino, grafana-operator, harbor-registry, kubeflow-katib,...

GO-2023-1772 vulnerabilities

Vulnerabilities for packages: aactl, argocd-image-updater, bom, kubernetes-dashboard, kpt...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: aactl, crossplane-provider-aws-iam, crossplane-provider-aws-lambda, pulumi, falcoctl, k3s, act, crossplane-provider-aws-ec2, eksctl, gh, kine, prometheus, crossplane-provider-aws-sns, opentofu, crossplane-provider-aws-dynamodb, cilium, crossplane-provider-azure-sql,...

CVE-2026-72526

A flaw was found in the multicloud-integrations component. The Application propagation controller processes the ocm-managed-cluster annotation from an Application Custom Resource CR without proper validation. A tenant with permissions to create Applications on the hub cluster can exploit this to...

CVE-2026-70398

A flaw was found in multicloud-integrations, a component of Red Hat Advanced Cluster Management RHACM. This vulnerability allows an authenticated user, referred to as a tenant, to manipulate the GitOpsCluster controller. By exploiting this, a tenant can redirect sensitive spoke cluster bearer...

CVE-2026-70398 Multicloud-integrations: multicloud-integrations: gitopscluster.spec.argoserver.argonamespace writes spoke bearer tokens to attacker-chosen namespace

A flaw was found in multicloud-integrations, a component of Red Hat Advanced Cluster Management RHACM. This vulnerability allows an authenticated user, referred to as a tenant, to manipulate the GitOpsCluster controller. By exploiting this, a tenant can redirect sensitive spoke cluster bearer...

CVE-2026-70398 Multicloud-integrations: multicloud-integrations: gitopscluster.spec.argoserver.argonamespace writes spoke bearer tokens to attacker-chosen namespace

A flaw was found in multicloud-integrations, a component of Red Hat Advanced Cluster Management RHACM. This vulnerability allows an authenticated user, referred to as a tenant, to manipulate the GitOpsCluster controller. By exploiting this, a tenant can redirect sensitive spoke cluster bearer...