CLEANSTART-2026-YB55927 Security fixes for CVE-2025-15558, CVE-2025-61729, CVE-2026-25934, CVE-2026-26958, CVE-2026-33186, ghsa-2464-8j7c-4cjm, ghsa-2x5j-vhc8-9cwm, ghsa-37cx-329c-33x3, ghsa-fv92-fjc5-jj9h, ghsa-fw7p-63qq-7hpr, ghsa-p436-gjf2-799p, ghsa-p77j-4mvh-x3m3 applied in versions: 3.6.16-r0, 3.7.4-r0, 3.7.9-r0, 4.0.1-r0, 4.0.2-r0, 4.0.2-r1

Multiple security vulnerabilities affect the argo-workflows package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RU00721 Security fixes for CVE-2025-0913, CVE-2025-15558, CVE-2025-4673, CVE-2025-47907, CVE-2025-47914, CVE-2025-58181, CVE-2025-62156, CVE-2025-62157, CVE-2026-24051, CVE-2026-25934, CVE-2026-26958, CVE-2026-33186, ghsa-37cx-329c-33x3, ghsa-c2hv-4pfj-mm2r, ghsa-cfpf-hrx2-8rv6, ghsa-fw7p-63qq-7hpr, ghsa-p436-gjf2-799p, ghsa-p77j-4mvh-x3m3, ghsa-p84v-gxvw-73pf applied in versions: 3.7.0-r0, 3.7.3-r0, 3.7.4-r0, 3.7.6-r0, 3.7.9-r0, 3.7.9-r1, 3.7.9-r2, 4.0.2-r0, 4.0.2-r1

Multiple security vulnerabilities affect the argo-workflows-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LS30652 Security fixes for CVE-2025-0913, CVE-2025-15558, CVE-2025-4673, CVE-2025-47907, CVE-2025-47914, CVE-2025-58181, CVE-2025-62156, CVE-2025-62157, CVE-2026-24051, CVE-2026-25934, CVE-2026-26958, CVE-2026-33186, ghsa-37cx-329c-33x3, ghsa-c2hv-4pfj-mm2r, ghsa-cfpf-hrx2-8rv6, ghsa-fw7p-63qq-7hpr, ghsa-p436-gjf2-799p, ghsa-p77j-4mvh-x3m3, ghsa-p84v-gxvw-73pf applied in versions: 3.7.0-r0, 3.7.11-r0, 3.7.3-r0, 3.7.4-r0, 3.7.6-r0, 3.7.9-r0, 3.7.9-r1, 3.7.9-r2, 4.0.2-r0

Multiple security vulnerabilities affect the argo-workflows-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VJ56922 Security fixes for CVE-2025-15558, CVE-2025-61729, CVE-2026-25934, CVE-2026-26958, CVE-2026-33186, ghsa-2464-8j7c-4cjm, ghsa-2x5j-vhc8-9cwm, ghsa-37cx-329c-33x3, ghsa-fv92-fjc5-jj9h, ghsa-fw7p-63qq-7hpr, ghsa-p436-gjf2-799p, ghsa-p77j-4mvh-x3m3 applied in versions: 3.6.16-r0, 3.7.11-r0, 3.7.4-r0, 3.7.9-r0, 4.0.1-r0, 4.0.2-r0

Multiple security vulnerabilities affect the argo-workflows package. These issues are resolved in later releases. See references for individual vulnerability details...

PT-2026-42337

Multiple security vulnerabilities affect the argo-workflows package. These issues are resolved in later releases. See references for individual vulnerability details...

PT-2026-42354

Multiple security vulnerabilities affect the argo-workflows package. These issues are resolved in later releases. See references for individual vulnerability details...

Axios NPM Distribution Compromised in Supply Chain Attack

A compromised axios maintainer account led to malicious npm releases that propagated across environments. Learn how to assess impact, detect compromise, and secure your development workflows...

GHSA-37CH-88JC-XWX2 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, kubeflow-centraldashboard, wazuh-dashboard, wazuh-dashboard-fips, arangodb, json-server, argo-workflows, pelias-api, langfuse, langfuse-fips, thingsboard-fips, gitlab-rails-ce-fips, sqlpad, kubeflow-pipelines, kubescape-grype-offline-db, py3-captum,...

CVE-2026-4867 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, kubeflow-centraldashboard, wazuh-dashboard, wazuh-dashboard-fips, arangodb, json-server, argo-workflows, pelias-api, langfuse, langfuse-fips, thingsboard-fips, gitlab-rails-ce-fips, sqlpad, kubeflow-pipelines, kubescape-grype-offline-db, py3-captum,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, melange, src-fingerprint, cerbos-fips, gitsign, flux-source-controller, rancher-fleet-fips, trufflehog-fips, commercial-chainloop-cli, argo-workflows-fips, syft, trivy-operator-fips, gitlab-rails-ce-fips, nemo, gomplate-fips, witness, zot,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, melange, src-fingerprint, cerbos-fips, gitsign, flux-source-controller, rancher-fleet-fips, trufflehog-fips, commercial-chainloop-cli, argo-workflows-fips, syft, trivy-operator-fips, gitlab-rails-ce-fips, nemo, gomplate-fips, witness, zot,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, melange, src-fingerprint, cerbos-fips, gitsign, flux-source-controller, rancher-fleet-fips, trufflehog-fips, commercial-chainloop-cli, argo-workflows-fips, syft, trivy-operator-fips, gitlab-rails-ce-fips, nemo, gomplate-fips, witness, zot,...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, melange, src-fingerprint, cerbos-fips, gitsign, flux-source-controller, rancher-fleet-fips, trufflehog-fips, commercial-chainloop-cli, argo-workflows-fips, syft, trivy-operator-fips, gitlab-rails-ce-fips, nemo, gomplate-fips, witness, zot,...

GHSA-37CH-88JC-XWX2 vulnerabilities

Vulnerabilities for packages: json-server, sqlpad, argo-workflows, kubeflow-pipelines, kubeflow-katib, kubeflow-centraldashboard...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: kots, trivy-operator, apko, dagger, steampipe, kubevela, argo-events, pulumi-kubernetes-operator, teleport, kyverno, scorecard, xeol, gomplate, pulumi-language-dotnet, grafana-alloy, osv-scanner, syft, gitea, tfsec, gitaly, gitlab-runner, nuclei, snyk-cli,...

CVE-2026-4867 vulnerabilities

Vulnerabilities for packages: json-server, sqlpad, argo-workflows, kubeflow-pipelines, kubeflow-katib, kubeflow-centraldashboard...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: kots, trivy-operator, apko, dagger, steampipe, kubevela, argo-events, pulumi-kubernetes-operator, teleport, kyverno, scorecard, xeol, gomplate, pulumi-language-dotnet, grafana-alloy, osv-scanner, syft, gitea, tfsec, gitaly, gitlab-runner, nuclei, snyk-cli,...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: kots, trivy-operator, apko, dagger, steampipe, kubevela, argo-events, pulumi-kubernetes-operator, teleport, kyverno, scorecard, xeol, gomplate, pulumi-language-dotnet, grafana-alloy, osv-scanner, syft, gitea, tfsec, gitaly, gitlab-runner, nuclei, snyk-cli,...

The Real Risk of Vibecoding

This blog looks at how AI‑driven vibecoding speeds up software development while increasing security risk by outpacing traditional review and ownership. It explains why security needs to move earlier and be built into modern development workflows...

SQL Injection

Overview n8n is a n8n Workflow Automation Tool Affected versions of this package are vulnerable to SQL Injection in the orderByColumn expression of the Data Table Get node. An attacker with permissions to create or modify workflows can execute arbitrary SQL commands by supplying crafted input,...