772 matches found
CVE-2023-24531 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, newrelic-fluent-bit-output, argo-workflows...
CVE-2024-35255 vulnerabilities
Vulnerabilities for packages: airflow, rekor, step-ca, sigstore-scaffolding, thanos, argo-events, buildkitd, prometheus-operator, tkn, up, hugo-extended, rook, secrets-store-csi-driver-provider-azure, grafana-agent-operator, harbor-registry, fulcio, druid, restic, py3-cassandra-medusa, bank-vault...
GHSA-952P-6RRQ-RCJV vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, semaphore, arangodb, ts-patch, argo-workflows, kibana, opensearch-dashboards-fips, renovate, gitlab-rails-ce-fips, py3-captum, kubeflow-pipelines, opensearch-dashboards, lerna, kubeflow-katib...
CVE-2024-4067 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, semaphore, arangodb, ts-patch, argo-workflows, kibana, opensearch-dashboards-fips, renovate, gitlab-rails-ce-fips, py3-captum, kubeflow-pipelines, opensearch-dashboards, lerna, kubeflow-katib...
CVE-2024-28180 vulnerabilities
Vulnerabilities for packages: kots, rekor, caddy, apko, step-ca, grpc-health-probe, rabbitmq-messaging-topology-operator, sigstore-scaffolding, tkn, slsa-verifier, dgraph, rook, kubernetes-dashboard, gomplate, fulcio, cloudflared, temporal, bank-vaults, flux-kustomize-controller, nerdctl,...
CVE-2024-27304 vulnerabilities
Vulnerabilities for packages: kots, caddy, step-ca, trillian, spicedb, src, kube-bench, ferretdb, amass, kine, argo-workflows, step, k3s, temporal-server...
CVE-2024-27289 vulnerabilities
Vulnerabilities for packages: kots, caddy, step-ca, trillian, step, argo-workflows...
CVE-2024-27304 vulnerabilities
Vulnerabilities for packages: wavefront-collector-for-kubernetes, caddy-fips, spicedb, trillian, kots, step-ca, amass, argo-workflows-fips, argo-workflows, temporal-server, trillian-fips, falcosidekick-fips, kine, temporal-server-fips, kube-bench-fips, k3s, ferretdb, kube-bench, caddy, step, src...
BIT-ARGO-WORKFLOWS-2021-37914
In Argo Workflows through 3.1.3, if EXPRESSIONTEMPLATES is enabled and untrusted users are allowed to specify input parameters when running workflows, an attacker may be able to disrupt a workflow because expression template output is evaluated...
BIT-ARGO-WORKFLOWS-2022-29164 Privilege Escalation in argo-workflows
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. In affected versions an attacker can create a workflow which produces a HTML artifact containing an HTML file that contains a script which uses XHR calls to interact with the Argo Serv...
GHSA-8R3F-844C-MC37 vulnerabilities
Vulnerabilities for packages: kots, newrelic-infra-operator, secrets-store-csi-driver-provider-aws, kubeflow, kyverno-policy-reporter, rabbitmq-messaging-topology-operator, slsa-verifier, metallb, prometheus-pushgateway, crossplane-provider-aws-firehose, kine, kubernetes,...
CVE-2024-24786 vulnerabilities
Vulnerabilities for packages: wavefront-collector-for-kubernetes, kubernetes-dashboard-fips, melange, flux-source-controller, terraform, rabbitmq-cluster-operator, dex, cadvisor, argo-workflows-fips, syft, kube-rbac-proxy-fips, buf, atlantis, kine, kyverno-policy-reporter, kaf, boring-registry,...
GHSA-7JWH-3VRQ-Q3M8 vulnerabilities
Vulnerabilities for packages: wavefront-collector-for-kubernetes, caddy-fips, spicedb, trillian, kots, step-ca, amass, argo-workflows-fips, argo-workflows, temporal-server, trillian-fips, falcosidekick-fips, kine, temporal-server-fips, kube-bench-fips, k3s, ferretdb, kube-bench, caddy, step, src...
GHSA-7JWH-3VRQ-Q3M8 vulnerabilities
Vulnerabilities for packages: kots, caddy, step-ca, trillian, spicedb, src, kube-bench, ferretdb, amass, kine, argo-workflows, step, k3s, temporal-server...
GHSA-MRWW-27VC-GGHV vulnerabilities
Vulnerabilities for packages: wavefront-collector-for-kubernetes, caddy-fips, spicedb, trillian, kots, step-ca, amass, argo-workflows-fips, argo-workflows, temporal-server, trillian-fips, falcosidekick-fips, kine, temporal-server-fips, kube-bench-fips, k3s, ferretdb, kube-bench, caddy, step, src...
GHSA-M7WR-2XF7-CM9P vulnerabilities
Vulnerabilities for packages: caddy, wavefront-collector-for-kubernetes, step-ca, argo-workflows, argo-workflows-fips, caddy-fips, trillian-fips, step, trillian, kots...
GHSA-XW73-RW38-6VJC vulnerabilities
Vulnerabilities for packages: loki, aactl, kargo, up, gitsign, docker-machine-driver-harvester, k9s, skaffold, chartmuseum, scorecard, docker-credential-gcr, kots, k8sgpt, cadvisor, zarf, argo-workflows, argo-workflows-fips, skopeo, pulumi, cosign-fips, guac, newrelic-infrastructure-agent, zot,...
CVE-2024-24557 vulnerabilities
Vulnerabilities for packages: loki, aactl, kargo, up, gitsign, docker-machine-driver-harvester, k9s, skaffold, chartmuseum, scorecard, docker-credential-gcr, kots, k8sgpt, cadvisor, zarf, argo-workflows, argo-workflows-fips, skopeo, pulumi, cosign-fips, guac, newrelic-infrastructure-agent, zot,...