PT-2024-32838

Name of the Vulnerable Software and Affected Versions Argo Workflows version 3.6.0-rc1 Description Due to a race condition in a global variable, the Argo Workflows controller can be made to crash on-command by any user with access to execute a workflow. This issue can be exploited by creating and...

GHSA-GX9M-WHJM-85JF vulnerabilities

Vulnerabilities for packages: argo-workflows...

CVE-2024-47875 vulnerabilities

Vulnerabilities for packages: argo-workflows...

CVE-2024-47875 vulnerabilities

Vulnerabilities for packages: argo-workflows, opensearch-dashboards-fips...

GHSA-PXG6-PF52-XH8X vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, kubeflow-centraldashboard, arangodb, argo-workflows, kibana, thingsboard, opensearch-dashboards-fips, gitlab-rails-ce-fips, commercial-gitlab-rails-ee-fips, sqlpad, kubeflow-pipelines, jitsucom-jitsu, opensearch-dashboards, commercial-gitlab-rails-ee...

CVE-2024-47764 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, kubeflow-centraldashboard, arangodb, argo-workflows, kibana, thingsboard, opensearch-dashboards-fips, gitlab-rails-ce-fips, commercial-gitlab-rails-ee-fips, sqlpad, kubeflow-pipelines, jitsucom-jitsu, opensearch-dashboards, commercial-gitlab-rails-ee...

GHSA-MMHX-HMJR-R674 vulnerabilities

Vulnerabilities for packages: argo-workflows...

GHSA-MMHX-HMJR-R674 vulnerabilities

Vulnerabilities for packages: argo-workflows, opensearch-dashboards, opensearch-dashboards-fips...

CVE-2024-45801 vulnerabilities

Vulnerabilities for packages: argo-workflows...

CVE-2024-45801 vulnerabilities

Vulnerabilities for packages: argo-workflows, opensearch-dashboards, opensearch-dashboards-fips...

GHSA-9WV6-86V2-598J vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, arangodb, argo-workflows, thingsboard, opensearch-dashboards-fips, sqlpad, kubeflow-pipelines, opensearch-dashboards...

CVE-2024-45296 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, arangodb, argo-workflows, thingsboard, opensearch-dashboards-fips, sqlpad, kubeflow-pipelines, opensearch-dashboards...

GHSA-4VVJ-4CPR-P986 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-workflows...

GHSA-4VVJ-4CPR-P986 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-katib, arangodb...

CVE-2024-43788 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-workflows...

CVE-2024-43788 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-katib, arangodb...

GO-2022-0388 Argo Server TLS requests could be forged by attacker with network access in github.com/argoproj/argo-workflows

Argo Server TLS requests could be forged by attacker with network access in github.com/argoproj/argo-workflows...

GO-2022-0405 Potential privilege escalation on Kubernetes >= v1.19 when the Argo Sever is run with `--auth-mode=client` in github.com/argoproj/argo-workflows

Potential privilege escalation on Kubernetes = v1.19 when the Argo Sever is run with --auth-mode=client in github.com/argoproj/argo-workflows...

CVE-2023-24531 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, newrelic-fluent-bit-output, argo-workflows...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: airflow, rekor, step-ca, sigstore-scaffolding, thanos, argo-events, buildkitd, prometheus-operator, tkn, up, hugo-extended, rook, secrets-store-csi-driver-provider-azure, grafana-agent-operator, harbor-registry, fulcio, druid, restic, py3-cassandra-medusa, bank-vault...