772 matches found
CVE-2025-7339 vulnerabilities
Vulnerabilities for packages: json-server, serve, thingsboard, sqlpad, tileserver-gl, argo-workflows, code-server, kubeflow-katib, kubeflow-centraldashboard...
CVE-2025-7339 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, kubeflow-centraldashboard, serve, arangodb, json-server, argo-workflows, tileserver-gl-fips, thingsboard, vitess, gitlab-rails-ce-fips, sqlpad, tileserver-gl, code-server, kubeflow-katib...
GHSA-76C9-3JPH-RJ3Q vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, kubeflow-centraldashboard, serve, arangodb, json-server, argo-workflows, tileserver-gl-fips, thingsboard, vitess, gitlab-rails-ce-fips, sqlpad, tileserver-gl, code-server, kubeflow-katib...
CVE-2025-30360 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, argo-workflows...
CVE-2025-30359 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, argo-workflows...
GHSA-9JGG-88MC-972H vulnerabilities
Vulnerabilities for packages: kubeflow-katib, argo-workflows...
GHSA-4V9V-HFQ4-RM2V vulnerabilities
Vulnerabilities for packages: kubeflow-katib, argo-workflows...
CVE-2025-30359 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, arangodb, argo-workflows, gitlab-rails-ce-fips, kubeflow-katib...
CVE-2025-30360 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, arangodb, argo-workflows, gitlab-rails-ce-fips, kubeflow-katib...
GHSA-4V9V-HFQ4-RM2V vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, arangodb, argo-workflows, gitlab-rails-ce-fips, kubeflow-katib...
GHSA-9JGG-88MC-972H vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, arangodb, argo-workflows, gitlab-rails-ce-fips, kubeflow-katib...
GHSA-V6H2-P8H4-QCJW vulnerabilities
Vulnerabilities for packages: npm, ts-patch, opensearch-dashboards, kubeflow-pipelines, renovate, node-gyp, sqlpad, tileserver-gl, argo-workflows, kubeflow-centraldashboard, jupyter-base-notebook, eslint, code-server, langfuse, lerna, prism, pulumi, py3-jupyterlab, rancher-api-ui, vitess...
CVE-2025-5889 vulnerabilities
Vulnerabilities for packages: npm, ts-patch, opensearch-dashboards, kubeflow-pipelines, renovate, node-gyp, sqlpad, tileserver-gl, argo-workflows, kubeflow-centraldashboard, jupyter-base-notebook, eslint, code-server, langfuse, lerna, prism, pulumi, py3-jupyterlab, rancher-api-ui, vitess...
GHSA-V6H2-P8H4-QCJW vulnerabilities
Vulnerabilities for packages: npm, jupyter-base-notebook, nextcloud-server, langfuse-fips, code-server, bash-language-server, foxx-cli, arangodb, argo-workflows, eslint, opensearch-dashboards-fips, langfuse, pulumi, renovate, gitlab-rails-ce-fips, vitess, sqlpad, kubeflow-pipelines,...
CVE-2025-5889 vulnerabilities
Vulnerabilities for packages: npm, jupyter-base-notebook, nextcloud-server, langfuse-fips, code-server, bash-language-server, foxx-cli, arangodb, argo-workflows, eslint, opensearch-dashboards-fips, langfuse, pulumi, renovate, gitlab-rails-ce-fips, vitess, sqlpad, kubeflow-pipelines,...
CVE-2024-52799
Argo Workflows Chart is used to set up argo and its needed dependencies through one command. Prior to 0.44.0, the workflow-role has excessive privileges, the worst being create pods/exec, which will allow kubectl exec into any Pod in the same namespace, i.e. arbitrary code execution within those...
PT-2025-41938
Name of the Vulnerable Software and Affected Versions Argo Workflows versions prior to 3.6.12 Argo Workflows versions 3.7.0 through 3.7.2 Description Argo Workflows is a container-native workflow engine for Kubernetes. Versions prior to 3.6.12 and versions 3.7.0 through 3.7.2 expose artifact...
BIT-ARGO-WORKFLOWS-2024-53862 Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. When using --auth-mode=client, Archived Workflows can be retrieved with a fake or spoofed token via the GET Workflow endpoint: /api/v1/workflows/namespace/name or when using...