772 matches found
PT-2026-101716
Security vulnerability affects the argo-workflows package. This issue is resolved in later releases. See references for vulnerability details...
CVE-2026-54466 vulnerabilities
Vulnerabilities for packages: argo-workflows...
CVE-2026-59887 vulnerabilities
Vulnerabilities for packages: argo-workflows...
CVE-2026-54490 vulnerabilities
Vulnerabilities for packages: argo-workflows...
GHSA-F5VJ-F2HX-8M93 vulnerabilities
Vulnerabilities for packages: argo-workflows...
GHSA-MP7J-QC5W-4988 vulnerabilities
Vulnerabilities for packages: argo-workflows...
GHSA-V245-V573-V5VM vulnerabilities
Vulnerabilities for packages: argo-workflows...
GHSA-XV26-6W52-CPH6 vulnerabilities
Vulnerabilities for packages: argo-workflows...
GHSA-M28W-2PQF-7QGJ vulnerabilities
Vulnerabilities for packages: argo-workflows...
CVE-2026-14620 vulnerabilities
Vulnerabilities for packages: argo-workflows...
CVE-2026-14631 vulnerabilities
Vulnerabilities for packages: argo-workflows...
CVE-2026-45819 vulnerabilities
Vulnerabilities for packages: jupyter-base-notebook, argo-workflows, langfuse...
GHSA-W5VR-8V7Q-W6RV vulnerabilities
Vulnerabilities for packages: jupyter-base-notebook, argo-workflows, langfuse...
SUSE CVE-2026-54526
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Prior to 3.7.15 and 4.0.6, the allow-list fix for CVE-2026-31892 is incomplete because workflow/util/merge.go ValidateUserOverrides and SanitizeUserWorkflowSpec walk only the top-level...
CLEANSTART-2026-CW68169 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer
Multiple security vulnerabilities affect the argo-workflows package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...
GO-2026-6223 Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list (Incomplete fix for CVE-2026-31892) in github.com/argoproj/argo-workflows
Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list Incomplete fix for CVE-2026-31892 in github.com/argoproj/argo-workflows...
GHSA-76P8-FHRM-VPC7 vulnerabilities
Vulnerabilities for packages: flux, spark-operator, kapp-controller, kwok, scorecard, k8sgateway, kubernetes-replicator, gobuster, conftest, go-discover, crossplane-provider-aws-sns, cosign, minio, cert-manager, cloud-provider-vsphere, falco-no-driver, minio-object-browser, sbom-scorecard,...
GO-2024-2605 vulnerabilities
Vulnerabilities for packages: trillian-fips, caddy-fips, argo-workflows-fips, step-ca, trillian, kots, step, wavefront-collector-for-kubernetes, caddy, argo-workflows...