CVE-2025-8556 vulnerabilities

Vulnerabilities for packages: argo-cd, guac, grafana-alloy, flux, gitsign, argo-events-fips, crossplane-provider-aws-kinesis, argo-events, crossplane-provider-aws-ec2, extism, xeol, tekton-chains-fips, crossplane-provider-azure-storage, nuclei, trufflehog, atlantis, crossplane-provider-aws-kms,...

GHSA-76C9-3JPH-RJ3Q vulnerabilities

Vulnerabilities for packages: thingsboard, kubeflow-katib, json-server, serve, code-server, argo-workflows, sqlpad, tileserver-gl, kubeflow-centraldashboard...

CVE-2025-7339 vulnerabilities

Vulnerabilities for packages: thingsboard, kubeflow-katib, json-server, serve, code-server, argo-workflows, sqlpad, tileserver-gl, kubeflow-centraldashboard...

CVE-2025-7339 vulnerabilities

Vulnerabilities for packages: tileserver-gl-fips, json-server, sqlpad, vitess, serve, gitlab-rails-ce, gitlab-rails-ce-fips, code-server, tileserver-gl, kubeflow-katib, thingsboard, kubeflow-centraldashboard, argo-workflows...

GHSA-76C9-3JPH-RJ3Q vulnerabilities

Vulnerabilities for packages: tileserver-gl-fips, json-server, sqlpad, vitess, serve, gitlab-rails-ce, gitlab-rails-ce-fips, code-server, tileserver-gl, kubeflow-katib, thingsboard, kubeflow-centraldashboard, argo-workflows...

CVE-2025-30360 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-katib...

CVE-2025-30359 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-katib...

GHSA-9JGG-88MC-972H vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-katib...

GHSA-4V9V-HFQ4-RM2V vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-katib...

CVE-2025-30359 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-workflows...

CVE-2025-30360 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-workflows...

GHSA-4V9V-HFQ4-RM2V vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-workflows...

GHSA-9JGG-88MC-972H vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-workflows...

GHSA-V6H2-P8H4-QCJW vulnerabilities

Vulnerabilities for packages: ts-patch, node-gyp, renovate, prism, lerna, jupyter-base-notebook, tileserver-gl, npm, eslint, opensearch-dashboards, langfuse, kubeflow-pipelines, rancher-api-ui, sqlpad, argo-workflows, kubeflow-centraldashboard, vitess, pulumi, py3-jupyterlab, code-server...

CVE-2025-5889 vulnerabilities

Vulnerabilities for packages: ts-patch, node-gyp, renovate, prism, lerna, jupyter-base-notebook, tileserver-gl, npm, eslint, opensearch-dashboards, langfuse, kubeflow-pipelines, rancher-api-ui, sqlpad, argo-workflows, kubeflow-centraldashboard, vitess, pulumi, py3-jupyterlab, code-server...

GHSA-V6H2-P8H4-QCJW vulnerabilities

Vulnerabilities for packages: renovate, jupyter-base-notebook, opensearch-dashboards-fips, opensearch-dashboards, prism, langfuse, sqlpad, ts-patch, emsdk, drupal, tensorflow-cpu-jupyter, tileserver-gl, kubeflow-centraldashboard, npm, langfuse-fips, tileserver-gl-fips, wazuh-dashboard, vitess,...

CVE-2025-5889 vulnerabilities

Vulnerabilities for packages: renovate, jupyter-base-notebook, opensearch-dashboards-fips, opensearch-dashboards, prism, langfuse, sqlpad, ts-patch, emsdk, drupal, tensorflow-cpu-jupyter, tileserver-gl, kubeflow-centraldashboard, npm, langfuse-fips, tileserver-gl-fips, wazuh-dashboard, vitess,...

CVE-2024-52799

Argo Workflows Chart is used to set up argo and its needed dependencies through one command. Prior to 0.44.0, the workflow-role has excessive privileges, the worst being create pods/exec, which will allow kubectl exec into any Pod in the same namespace, i.e. arbitrary code execution within those...

PT-2025-41938

Name of the Vulnerable Software and Affected Versions Argo Workflows versions prior to 3.6.12 Argo Workflows versions 3.7.0 through 3.7.2 Description Argo Workflows is a container-native workflow engine for Kubernetes. Versions prior to 3.6.12 and versions 3.7.0 through 3.7.2 expose artifact...

BIT-ARGO-WORKFLOWS-2024-53862 Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. When using --auth-mode=client, Archived Workflows can be retrieved with a fake or spoofed token via the GET Workflow endpoint: /api/v1/workflows/namespace/name or when using...