GHSA-WF6X-7X77-MVGW vulnerabilities

Vulnerabilities for packages: argo-workflows, vitess, kubeflow-katib, rancher-api-ui...

CVE-2026-29063 vulnerabilities

Vulnerabilities for packages: argo-workflows, vitess, kubeflow-katib, rancher-api-ui...

CVE-2026-29063 vulnerabilities

Vulnerabilities for packages: authentik-fips, argo-workflows, rancher-api-ui, gitlab-rails-ce, authentik, gitlab-rails-ce-fips, kubeflow-katib, vitess...

GHSA-WF6X-7X77-MVGW vulnerabilities

Vulnerabilities for packages: authentik-fips, argo-workflows, rancher-api-ui, gitlab-rails-ce, authentik, gitlab-rails-ce-fips, kubeflow-katib, vitess...

CLEANSTART-2026-BY85815 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Multiple security vulnerabilities affect the argo-workflows package. OpenTelemetry-Go is the Go implementation of OpenTelemetry. See references for individual vulnerability details...

CLEANSTART-2026-MW73882 filippo

Multiple security vulnerabilities affect the argo-workflows package. filippo. See references for individual vulnerability details...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: trivy, zarf, wal-g, crossplane-provider-family-aws, terraform-provider-azuread, crossplane-provider-aws-memorydb, nfpm, cluster-api, crossplane-provider-aws-elasticache, q, crossplane-provider-azure-authorization, dagger, xeol, flux-image-automation-controller,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: trivy, zarf, wal-g, crossplane-provider-family-aws, terraform-provider-azuread, crossplane-provider-aws-memorydb, nfpm, cluster-api, crossplane-provider-aws-elasticache, q, crossplane-provider-azure-authorization, dagger, xeol, flux-image-automation-controller,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: kyverno, crossplane-provider-aws-s3, hydra-fips, grype-db, argo-rollouts, crossplane-provider-family-aws, kyverno-notation-aws, terraform-provider-azurerm-fips, crossplane-provider-keycloak, crossplane-fips, flux-kustomize-controller-fips, grafana-alloy-fips, sops,...

CLEANSTART-2026-DS30740 go-git is a highly extensible git implementation library written in pure Go

Multiple security vulnerabilities affect the argo-workflows-fips package. go-git is a highly extensible git implementation library written in pure Go. See references for individual vulnerability details...

CLEANSTART-2026-OA82425 go-git is a highly extensible git implementation library written in pure Go

Multiple security vulnerabilities affect the argo-workflows package. go-git is a highly extensible git implementation library written in pure Go. See references for individual vulnerability details...

CLEANSTART-2026-UQ43569 go-git is a highly extensible git implementation library written in pure Go

Multiple security vulnerabilities affect the argo-workflows package. go-git is a highly extensible git implementation library written in pure Go. See references for individual vulnerability details...

CLEANSTART-2026-IA56615 go-git is a highly extensible git implementation library written in pure Go

Multiple security vulnerabilities affect the argo-workflows package. go-git is a highly extensible git implementation library written in pure Go. See references for individual vulnerability details...

CLEANSTART-2026-DV04077 go-git is a highly extensible git implementation library written in pure Go

Multiple security vulnerabilities affect the argo-workflows-fips package. go-git is a highly extensible git implementation library written in pure Go. See references for individual vulnerability details...

GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: kyverno, mariadb-operator, telegraf, hydra-fips, envoy-gateway-fips, juicefs, flux-kustomize-controller-fips, grafana-alloy-fips, ory-kratos, sops, kyverno-fips, temporal, croc, seaweedfs, sqlexporter, sqlexporter-fips, gitea, dex, step, step-issuer, tkn-fips, step-c...

GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: dgraph, juicefs, spicedb, trufflehog, nuclei, step-ca, mariadb-operator, envoy-gateway, flux-kustomize-controller, sqlexporter, tailscale, temporal, argo-workflows, splunk-otel-collector, cerbos, minio, step-issuer, spire-server, k3s, sops, tkn, ksops, seaweedfs,...

GHSA-W7FW-MJWX-W883 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, py3-jupyterlab, langfuse, json-server, kubescape-grype-offline-db, thingsboard, argo-workflows, gitlab-rails-ce, tileserver-gl, arangodb, opensearch-dashboards-fips, tensorflow-cpu-jupyter, code-server, tileserver-gl-fips, langfuse-fips,...

CVE-2026-2391 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, py3-jupyterlab, langfuse, json-server, kubescape-grype-offline-db, thingsboard, argo-workflows, gitlab-rails-ce, tileserver-gl, arangodb, opensearch-dashboards-fips, tensorflow-cpu-jupyter, code-server, tileserver-gl-fips, langfuse-fips,...

CLEANSTART-2026-VG57433 Within HostnameError

Multiple security vulnerabilities affect the argo-workflows package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-CV28298 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption

Multiple security vulnerabilities affect the argo-workflows-fips package. SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption. See references for individual vulnerability...