GHSA-MMHX-HMJR-R674 vulnerabilities

Vulnerabilities for packages: argo-workflows...

CVE-2024-45801 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, argo-workflows, opensearch-dashboards...

CVE-2024-45801 vulnerabilities

Vulnerabilities for packages: argo-workflows...

GHSA-9WV6-86V2-598J vulnerabilities

Vulnerabilities for packages: sqlpad, argo-workflows, kubeflow-pipelines, arangodb, opensearch-dashboards-fips, thingsboard, opensearch-dashboards, kubeflow-centraldashboard...

CVE-2024-45296 vulnerabilities

Vulnerabilities for packages: sqlpad, argo-workflows, kubeflow-pipelines, arangodb, opensearch-dashboards-fips, thingsboard, opensearch-dashboards, kubeflow-centraldashboard...

GHSA-4VVJ-4CPR-P986 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-workflows...

GHSA-4VVJ-4CPR-P986 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-workflows...

CVE-2024-43788 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-workflows...

CVE-2024-43788 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-workflows...

GO-2022-0405 Potential privilege escalation on Kubernetes >= v1.19 when the Argo Sever is run with `--auth-mode=client` in github.com/argoproj/argo-workflows

Potential privilege escalation on Kubernetes = v1.19 when the Argo Sever is run with --auth-mode=client in github.com/argoproj/argo-workflows...

GO-2022-0388 Argo Server TLS requests could be forged by attacker with network access in github.com/argoproj/argo-workflows

Argo Server TLS requests could be forged by attacker with network access in github.com/argoproj/argo-workflows...

CVE-2023-24531 vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, kubeflow-katib, argo-workflows...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: chezmoi, up, k8sgpt, thanos, flux-source-controller, nuclei, opentelemetry-collector, sqlpad, cortex, bank-vaults, flyte, rook, step, grafana-mimir, sigstore-scaffolding, grafana-agent-operator, timestamp-authority, spire-server, flux-image-reflector-controller, hugo...

GHSA-952P-6RRQ-RCJV vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, argo-workflows, kubeflow-pipelines, opensearch-dashboards-fips, gitlab-rails-ce, kubeflow-katib, renovate, py3-captum, semaphore, kibana, lerna, ts-patch, gitlab-rails-ce-fips...

CVE-2024-4067 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, argo-workflows, kubeflow-pipelines, opensearch-dashboards-fips, gitlab-rails-ce, kubeflow-katib, renovate, py3-captum, semaphore, kibana, lerna, ts-patch, gitlab-rails-ce-fips...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: kots, dgraph, skopeo, flux-source-controller, gomplate, bank-vaults, kargo, rook, skaffold, k3s, step, kubernetes-dashboard, sigstore-scaffolding, caddy, timestamp-authority, frp, kube-rbac-proxy, spire-server, temporal, weaviate, minio, goreleaser,...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, amass, temporal-server-fips, step-ca, trillian-fips, step, ferretdb, kine, falcosidekick-fips, spicedb, kube-bench, wavefront-collector-for-kubernetes, caddy-fips, kube-bench-fips, trillian, temporal-server, argo-workflows, caddy, kots, src, k3s...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: kots, trillian, ferretdb, caddy, temporal-server, spicedb, kube-bench, src, step-ca, amass, kine, step, k3s, argo-workflows...

CVE-2024-27289 vulnerabilities

Vulnerabilities for packages: kots, trillian, caddy, step-ca, step, argo-workflows...

BIT-ARGO-WORKFLOWS-2021-37914

In Argo Workflows through 3.1.3, if EXPRESSIONTEMPLATES is enabled and untrusted users are allowed to specify input parameters when running workflows, an attacker may be able to disrupt a workflow because expression template output is evaluated...