CVE-2026-45819 vulnerabilities

Vulnerabilities for packages: langfuse, argo-workflows...

GHSA-W5VR-8V7Q-W6RV vulnerabilities

Vulnerabilities for packages: langfuse, argo-workflows...

SUSE CVE-2026-54526

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Prior to 3.7.15 and 4.0.6, the allow-list fix for CVE-2026-31892 is incomplete because workflow/util/merge.go ValidateUserOverrides and SanitizeUserWorkflowSpec walk only the top-level...

CLEANSTART-2026-CW68169 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Multiple security vulnerabilities affect the argo-workflows package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

GO-2026-6223 Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list (Incomplete fix for CVE-2026-31892) in github.com/argoproj/argo-workflows

Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list Incomplete fix for CVE-2026-31892 in github.com/argoproj/argo-workflows...

GHSA-76P8-FHRM-VPC7 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, kube-vip, cilium-cli, witness, flux-source-controller, flux-notification-controller, trufflehog, terraform-provider-acme, tigera-operator, steampipe, newrelic-nri-statsd, kaf, node-feature-discovery, wave, k8s-device-plugin, harbor-cli,...

GO-2026-4678 vulnerabilities

Vulnerabilities for packages: argo-workflows, argo-workflows-fips, kubeflow-pipelines...

GO-2026-5148 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-fips, argo-workflows, argo-workflows-fips, kubeflow-pipelines-driver-fips, kubeflow-pipelines...

GO-2026-5527 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-fips, argo-workflows, argo-workflows-fips, kubeflow-pipelines-driver-fips, kubeflow-pipelines...

GO-2025-4024 vulnerabilities

Vulnerabilities for packages: argo-workflows, argo-workflows-fips, kubeflow-pipelines...

GO-2024-3303 vulnerabilities

Vulnerabilities for packages: argo-workflows, argo-workflows-fips...

GO-2026-4350 vulnerabilities

Vulnerabilities for packages: argo-workflows, argo-workflows-fips, kubeflow-pipelines...

GO-2025-4223 vulnerabilities

Vulnerabilities for packages: argo-workflows, argo-workflows-fips, kubeflow-pipelines...

GO-2024-2605 vulnerabilities

Vulnerabilities for packages: step, trillian-fips, argo-workflows, argo-workflows-fips, step-ca, kots, caddy, wavefront-collector-for-kubernetes, trillian, caddy-fips...

GO-2024-2962 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-workflows, newrelic-fluent-bit-output...

GO-2026-5235 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-fips, argo-workflows, argo-workflows-fips, kubeflow-pipelines-driver-fips, kubeflow-pipelines...

GO-2026-5751 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-fips, argo-workflows, argo-workflows-fips, kubeflow-pipelines-driver-fips, kubeflow-pipelines...

GO-2025-4023 vulnerabilities

Vulnerabilities for packages: argo-workflows, argo-workflows-fips, kubeflow-pipelines...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: k8sgpt, kubescape, k9s, tfsec, flux-source-controller, skaffold, bom, go-licenses, gitsign, kots, dagger, zarf, flux, pulumi-language-dotnet, grafana-alloy, scorecard, snyk-cli, osv-scanner, grype, kaniko, wolfictl, flux-image-automation-controller,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: k8sgpt, kubescape, k9s, tfsec, flux-source-controller, skaffold, bom, go-licenses, gitsign, kots, dagger, zarf, flux, pulumi-language-dotnet, grafana-alloy, scorecard, snyk-cli, osv-scanner, grype, kaniko, wolfictl, flux-image-automation-controller,...