519 matches found
GO-2026-4910 vulnerabilities
Vulnerabilities for packages: gitaly, kots, zarf, gitsign, src-fingerprint, grype, argo-events, kyverno, argocd-image-updater, gomplate, teleport, tfsec, trivy-operator, nuclei, dagger, flux, kaniko, flux-image-automation-controller, kubescape, pulumi-kubernetes-operator, argo-workflows,...
GO-2026-4350 vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-pipelines...
GO-2026-5751 vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-pipelines...
GO-2026-5527 vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-pipelines...
GO-2026-5235 vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-pipelines...
GO-2025-4023 vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-pipelines...
GO-2024-2605 vulnerabilities
Vulnerabilities for packages: caddy, kots, argo-workflows, step, trillian, step-ca...
GO-2025-3525 vulnerabilities
Vulnerabilities for packages: amazon-cloudwatch-agent, argo-workflows, opentelemetry-collector, grafana-alloy, splunk-otel-collector, kargo, k8sgpt, argo-rollouts, tempo, nats, opentelemetry-collector-contrib, kubeflow-pipelines...
GO-2024-2606 vulnerabilities
Vulnerabilities for packages: caddy, kots, k3s, kube-bench, argo-workflows, amass, step, trillian, kine, step-ca, temporal-server, spicedb, ferretdb, src...
GO-2024-2918 vulnerabilities
Vulnerabilities for packages: sqlpad, zarf, buildkitd, fulcio, hugo, cosign, argo-events, wal-g, prometheus-operator, k8sgpt, tempo, rclone, terragrunt, ksops, flux-image-reflector-controller, nuclei, rekor, flux, falcoctl, secrets-store-csi-driver-provider-azure, kubescape, grafana-mimir,...
GO-2023-2334 vulnerabilities
Vulnerabilities for packages: kots, fulcio, gitsign, cloudflared, cosign, terragrunt, rekor, kubescape, tkn, slsa-verifier, argo-workflows, aactl, sops, flux-source-controller, dex, vexctl, oauth2-proxy, flux-kustomize-controller, spire-server, tekton-chains...
EUVD-2026-45029
Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list Incomplete fix for CVE-2026-31892...
GHSA-48P8-G2FX-3WWM Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list (Incomplete fix for CVE-2026-31892)
Summary The allow-list fix for CVE-2026-31892 GHSA-3wf5-g532-rcrr, and its follow-up coverage of hostNetwork/securityContext/serviceAccountName in GHSA-3775-99mw-8rp4, is incomplete. workflow/util/merge.go ValidateUserOverrides / SanitizeUserWorkflowSpec walk only the top-level fields of...
Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list (Incomplete fix for CVE-2026-31892)
Summary The allow-list fix for CVE-2026-31892 GHSA-3wf5-g532-rcrr, and its follow-up coverage of hostNetwork/securityContext/serviceAccountName in GHSA-3775-99mw-8rp4, is incomplete. workflow/util/merge.go ValidateUserOverrides / SanitizeUserWorkflowSpec walk only the top-level fields of...
CLEANSTART-2026-EU00318 Security fixes in argo-workflows 3.7.17-r1
Package argo-workflows version 3.7.17-r1 fixes 16 vulnerabilities: ghsa-3ppc-4f35-3m26, ghsa-7r86-cg39-jmmj, ghsa-23c5-xmqv-rm74, ghsa-xv26-6w52-cph6, ghsa-q3j6-qgpj-74h6...
CLEANSTART-2026-WX34505 Security fixes in argo-workflows-fips 4.0.4-r1
Package argo-workflows-fips version 4.0.4-r1 fixes 2 vulnerabilities: CVE-2026-35469, ghsa-3xc5-wrhm-f963...
CLEANSTART-2026-WT13041 Security fixes in argo-workflows-fips 3.6.17-r0
Package argo-workflows-fips version 3.6.17-r0 fixes 1 vulnerabilities: CVE-2025-68121...
CLEANSTART-2026-XI65728 Security fixes in argo-workflows-fips 3.6.18 r0
Package argo-workflows-fips version 3.6.18 r0 fixes 2 vulnerabilities: CVE-2026-24051, CVE-2026-27141...