CLEANSTART-2026-CW68169 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Multiple security vulnerabilities affect the argo-workflows package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

GHSA-76P8-FHRM-VPC7 vulnerabilities

Vulnerabilities for packages: rancher-helm, sbom-scorecard, syft, argocd-image-updater, rancher-agent, spicedb-operator, opentelemetry-collector-contrib, aws-load-balancer-controller, vendir, kubescape-operator, rancher-system-agent, slsa-verifier, k9s, keda, kubernetes-csi-external-snapshotter,...

GO-2026-5527 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-driver-fips, kubeflow-pipelines-fips, argo-workflows-fips, kubeflow-pipelines, argo-workflows...

GO-2026-4678 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows-fips, argo-workflows...

GO-2026-5148 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-driver-fips, kubeflow-pipelines-fips, argo-workflows-fips, kubeflow-pipelines, argo-workflows...

GO-2026-4350 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows-fips, argo-workflows...

GO-2025-4024 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows-fips, argo-workflows...

GO-2025-4223 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows-fips, argo-workflows...

GO-2024-3303 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, argo-workflows...

GO-2024-2605 vulnerabilities

Vulnerabilities for packages: kots, wavefront-collector-for-kubernetes, trillian, caddy, trillian-fips, argo-workflows-fips, step-ca, step, caddy-fips, argo-workflows...

GO-2026-5751 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-driver-fips, kubeflow-pipelines-fips, argo-workflows-fips, kubeflow-pipelines, argo-workflows...

GO-2026-5235 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-driver-fips, kubeflow-pipelines-fips, argo-workflows-fips, kubeflow-pipelines, argo-workflows...

GO-2025-4023 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows-fips, argo-workflows...

GO-2024-2962 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, newrelic-fluent-bit-output, argo-workflows...

GO-2024-3303 vulnerabilities

Vulnerabilities for packages: argo-workflows...

GO-2026-5148 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: bom, kargo, syft, argo-events, argocd-image-updater, crossplane, trivy, timoni, skaffold, zot, flux-source-controller, k9s, flux-kustomize-controller, dagger, gitsign, zarf, pulumi-language-java, argo-workflows, flux-image-automation-controller, scorecard, kubescape,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: bom, kargo, syft, argo-events, argocd-image-updater, crossplane, trivy, timoni, skaffold, zot, flux-source-controller, k9s, flux-kustomize-controller, dagger, gitsign, zarf, pulumi-language-java, argo-workflows, flux-image-automation-controller, scorecard, kubescape,...

GO-2025-4223 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows...

GO-2026-4350 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows...