519 matches found
GHSA-C7QV-Q95Q-8V27 vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-katib, kubeflow-pipelines...
GHSA-WR3J-PWJ9-HQQ6 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, argo-workflows...
CVE-2024-29180 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, argo-workflows...
GHSA-CWPG-QGC6-JXVQ vulnerabilities
Vulnerabilities for packages: kubeflow-katib, argo-workflows, newrelic-fluent-bit-output...
CVE-2024-21536 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, argo-workflows, kubeflow-pipelines...
GHSA-C7QV-Q95Q-8V27 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, argo-workflows, kubeflow-pipelines...
CVE-2023-24531 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, argo-workflows, newrelic-fluent-bit-output...
GHSA-93MQ-9FFX-83M2 vulnerabilities
Vulnerabilities for packages: amazon-cloudwatch-agent, argo-workflows, opentelemetry-collector, grafana-alloy, splunk-otel-collector, kargo, k8sgpt, argo-rollouts, tempo, nats, opentelemetry-collector-contrib, kubeflow-pipelines...
CVE-2025-29786 vulnerabilities
Vulnerabilities for packages: amazon-cloudwatch-agent, argo-workflows, opentelemetry-collector, grafana-alloy, splunk-otel-collector, kargo, k8sgpt, argo-rollouts, tempo, nats, opentelemetry-collector-contrib, kubeflow-pipelines...
GHSA-93MQ-9FFX-83M2 vulnerabilities
Vulnerabilities for packages: grafana-alloy, argo-rollouts, tempo, amazon-cloudwatch-agent-fips, argo-workflows-fips, splunk-otel-collector, kubeflow-pipelines, nats, amazon-cloudwatch-agent, opentelemetry-collector, splunk-otel-collector-fips, grafana-alloy-fips, opentelemetry-collector-fips,...
GHSA-67MH-4WV8-2F99 vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-katib, vite...
GHSA-67MH-4WV8-2F99 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, vite, kubeflow-katib, argo-workflows, gitlab-rails-ce...
CVE-2022-29164
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. In affected versions an attacker can create a workflow which produces a HTML artifact containing an HTML file that contains a script which uses XHR calls to interact with the Argo Serv...
GHSA-CWPG-QGC6-JXVQ vulnerabilities
Vulnerabilities for packages: newrelic-fluent-bit-output, argo-workflows, kubeflow-katib...
CVE-2025-21614 vulnerabilities
Vulnerabilities for packages: grafana-alloy, crossplane, pulumi-language-dotnet, flux-source-controller-fips, argo-workflows-fips, flux-image-automation-controller-fips, gitea-fips, kubescape, goreleaser, bom, zarf, amazon-ssm-agent, osv-scanner, src-fingerprint-fips, kyverno, flux,...
Sensitive Information Exposure
github.com/argoproj/argo-workflows/v3 is vulnerable to a Sensitive Information Exposure. The vulnerability is due to the absence of proper authentication checks in the GET Workflow endpoint when retrieving Archived Workflows. Specifically, when using --auth-mode=client, fake or spoofed tokens can...
SUSE CVE-2024-53862
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. When using --auth-mode=client, Archived Workflows can be retrieved with a fake or spoofed token via the GET Workflow endpoint: /api/v1/workflows/namespace/name or when using...
GHSA-RHX6-C78J-4Q9W vulnerabilities
Vulnerabilities for packages: grafana-image-renderer, kubeflow-centraldashboard, tileserver-gl, tileserver-gl-fips, arangodb, kubeflow-pipelines, thingsboard, argo-workflows, sqlpad...