Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via httprequester.go and httpdownloader.go‎. An attacker can access internal network resources and exfiltrate sensitive data by crafting malicious promotion templates or Promotion resources that trigger...

GHSA-CFPF-HRX2-8RV6 vulnerabilities

Vulnerabilities for packages: k3s, jaeger, amazon-cloudwatch-agent, argo-cd, k8sgpt, datadog-agent, argo-workflows, coredns, kargo, argo-rollouts, aws-otel-collector, nats, opentelemetry-collector, splunk-otel-collector, verticadb-operator, grafana-alloy, opentelemetry-collector-contrib,...

CVE-2025-68156 vulnerabilities

Vulnerabilities for packages: k3s, jaeger, amazon-cloudwatch-agent, argo-cd, k8sgpt, datadog-agent, argo-workflows, coredns, kargo, argo-rollouts, aws-otel-collector, nats, opentelemetry-collector, splunk-otel-collector, verticadb-operator, grafana-alloy, opentelemetry-collector-contrib,...

GHSA-CFPF-HRX2-8RV6 vulnerabilities

Vulnerabilities for packages: argo-cd, coredns, kargo, rke2-runtime, vale, argo-cd-fips, argo-rollouts-fips, jaeger-fips, nrdot-collector-k8s, opentelemetry-collector, argo-rollouts, kine, elastic-agent-fips, opentelemetry-collector-contrib, splunk-otel-collector-fips, verticadb-operator-fips,...