GHSA-H74G-238J-357M vulnerabilities

Vulnerabilities for packages: libnvidia-container, juicefs, kubo, flux, falco-no-driver, grafana-alloy, argo-cd, nerdctl, istio, prometheus, redka, containerd, grafana, kots, cilium, telegraf, zot, kube-fluentd-operator, kubernetes-csi-node-driver-registrar, mattermost, coredns, minio, trino,...

GHSA-H74G-238J-357M vulnerabilities

Vulnerabilities for packages: ansible-operator-fips, kyverno-policy-reporter-ui-fips, kyverno, grafana-alloy-fips, kube-oidc-proxy, docker-cli-fips, logstash, argo-workflows, kubevirt-cdi-uploadproxy, kube-arangodb-fips, opentelemetry-collector-contrib-fips, terraform-fips,...

GHSA-XQ5J-9R39-C3VF vulnerabilities

Vulnerabilities for packages: terraform-provider-grafana-fips, crossplane-provider-aws-ssm-fips, skopeo-fips, jobset-fips, argo-workflows, crossplane-provider-aws-redshiftserverless, crossplane-provider-aws-acm-fips, crossplane-provider-aws-scheduler, traefik-fips, external-secrets-fips,...

CVE-2026-42297

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. From version 4.0.0 to before version 4.0.5, the Sync Service's ConfigMap-backed provider server/sync/synccm.go performs zero authorization checks on all CRUD operations create, read,...

EUVD-2026-28894

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Prior to versions 3.7.14 and 4.0.5, a user with create Workflow permission can bypass templateReferencing: Strict to get host network access, switch service accounts, override pod...

CVE-2026-42296 Argo Workflows has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Prior to versions 3.7.14 and 4.0.5, a user with create Workflow permission can bypass templateReferencing: Strict to get host network access, switch service accounts, override pod...

CVE-2026-42295 Argo Workflows: Exposure of artifact repository credentials

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. From version 4.0.0 to before version 4.0.5, the workflow executor logs all artifact repository credentials S3 access keys, secret keys, GCS service account keys, Azure account keys, Gi...

CVE-2026-42297 Argo Workflows Is Missing Authorization in Sync ConfigMap Provider

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. From version 4.0.0 to before version 4.0.5, the Sync Service's ConfigMap-backed provider server/sync/synccm.go performs zero authorization checks on all CRUD operations create, read,...

CVE-2026-42297

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. From version 4.0.0 to before version 4.0.5, the Sync Service's ConfigMap-backed provider server/sync/synccm.go performs zero authorization checks on all CRUD operations create, read,...

EUVD-2026-28895

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. From version 4.0.0 to before version 4.0.5, the Sync Service's ConfigMap-backed provider server/sync/synccm.go performs zero authorization checks on all CRUD operations create, read,...

CVE-2026-42297 Argo Workflows Is Missing Authorization in Sync ConfigMap Provider

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. From version 4.0.0 to before version 4.0.5, the Sync Service's ConfigMap-backed provider server/sync/synccm.go performs zero authorization checks on all CRUD operations create, read,...

CVE-2026-39819 vulnerabilities

Vulnerabilities for packages: terraform-provider-grafana-fips, kserve-localmodelnode-agent, crossplane-provider-aws-ssm-fips, amazon-vpc-cni-plugins-fips, spire-controller-manager-fips, skopeo-fips, chainloop-artifact-cas, govulncheck, aws-sigv4-proxy-fips, configmap-reload-fips, argo-workflows,...

CVE-2026-42501 vulnerabilities

Vulnerabilities for packages: terraform-provider-grafana-fips, kserve-localmodelnode-agent, crossplane-provider-aws-ssm-fips, amazon-vpc-cni-plugins-fips, spire-controller-manager-fips, skopeo-fips, chainloop-artifact-cas, govulncheck, aws-sigv4-proxy-fips, configmap-reload-fips, argo-workflows,...

GHSA-497X-JCXF-M478 vulnerabilities

Vulnerabilities for packages: terraform-provider-grafana-fips, kserve-localmodelnode-agent, crossplane-provider-aws-ssm-fips, spire-controller-manager-fips, skopeo-fips, chainloop-artifact-cas, jobset-fips, argo-workflows, crossplane-provider-aws-redshiftserverless,...

CVE-2026-39817 vulnerabilities

Vulnerabilities for packages: terraform-provider-grafana-fips, kserve-localmodelnode-agent, crossplane-provider-aws-ssm-fips, amazon-vpc-cni-plugins-fips, spire-controller-manager-fips, skopeo-fips, chainloop-artifact-cas, govulncheck, aws-sigv4-proxy-fips, configmap-reload-fips, argo-workflows,...

GHSA-QF3Q-3H68-MMH2 vulnerabilities

Vulnerabilities for packages: terraform-provider-grafana-fips, kserve-localmodelnode-agent, crossplane-provider-aws-ssm-fips, amazon-vpc-cni-plugins-fips, spire-controller-manager-fips, skopeo-fips, chainloop-artifact-cas, govulncheck, aws-sigv4-proxy-fips, configmap-reload-fips, argo-workflows,...

CVE-2026-39836 vulnerabilities

Vulnerabilities for packages: terraform-provider-grafana-fips, kserve-localmodelnode-agent, crossplane-provider-aws-ssm-fips, amazon-vpc-cni-plugins-fips, spire-controller-manager-fips, skopeo-fips, chainloop-artifact-cas, govulncheck, aws-sigv4-proxy-fips, configmap-reload-fips, argo-workflows,...

GHSA-QC64-M6C2-V4X7 vulnerabilities

Vulnerabilities for packages: terraform-provider-grafana-fips, kserve-localmodelnode-agent, crossplane-provider-aws-ssm-fips, amazon-vpc-cni-plugins-fips, spire-controller-manager-fips, skopeo-fips, chainloop-artifact-cas, govulncheck, aws-sigv4-proxy-fips, configmap-reload-fips, argo-workflows,...

GHSA-8G2R-HHVJ-MV99 vulnerabilities

Vulnerabilities for packages: terraform-provider-grafana-fips, kserve-localmodelnode-agent, crossplane-provider-aws-ssm-fips, amazon-vpc-cni-plugins-fips, spire-controller-manager-fips, skopeo-fips, chainloop-artifact-cas, govulncheck, aws-sigv4-proxy-fips, configmap-reload-fips, argo-workflows,...

GHSA-5M4P-2GJX-P2G8 vulnerabilities

Vulnerabilities for packages: terraform-provider-grafana-fips, kserve-localmodelnode-agent, crossplane-provider-aws-ssm-fips, amazon-vpc-cni-plugins-fips, spire-controller-manager-fips, skopeo-fips, chainloop-artifact-cas, govulncheck, aws-sigv4-proxy-fips, configmap-reload-fips, argo-workflows,...