467 matches found
GHSA-V6H2-P8H4-QCJW vulnerabilities
Vulnerabilities for packages: node-gyp, gitlab-rails-ce, vitess, prism, renovate, lerna, arangodb, kubeflow-centraldashboard, ts-patch, pulumi, tileserver-gl, kubeflow-pipelines, drupal, eslint, opensearch-dashboards, kibana, foxx-cli, sqlpad, code-server, tensorflow-cpu-jupyter, emsdk, langfuse,...
CVE-2025-5889 vulnerabilities
Vulnerabilities for packages: node-gyp, gitlab-rails-ce, vitess, prism, renovate, lerna, arangodb, kubeflow-centraldashboard, ts-patch, pulumi, tileserver-gl, kubeflow-pipelines, drupal, eslint, opensearch-dashboards, kibana, foxx-cli, sqlpad, code-server, tensorflow-cpu-jupyter, emsdk, langfuse,...
CVE-2024-52799
Argo Workflows Chart is used to set up argo and its needed dependencies through one command. Prior to 0.44.0, the workflow-role has excessive privileges, the worst being create pods/exec, which will allow kubectl exec into any Pod in the same namespace, i.e. arbitrary code execution within those...
PT-2025-41938
Name of the Vulnerable Software and Affected Versions Argo Workflows versions prior to 3.6.12 Argo Workflows versions 3.7.0 through 3.7.2 Description Argo Workflows is a container-native workflow engine for Kubernetes. Versions prior to 3.6.12 and versions 3.7.0 through 3.7.2 expose artifact...
BIT-ARGO-WORKFLOWS-2024-53862 Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. When using --auth-mode=client, Archived Workflows can be retrieved with a fake or spoofed token via the GET Workflow endpoint: /api/v1/workflows/namespace/name or when using...
CVE-2024-29180 vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-katib...
CVE-2024-21536 vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-katib, kubeflow-pipelines...
GHSA-WR3J-PWJ9-HQQ6 vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-katib...
GHSA-C7QV-Q95Q-8V27 vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-katib, kubeflow-pipelines...
GHSA-CWPG-QGC6-JXVQ vulnerabilities
Vulnerabilities for packages: kubeflow-katib, argo-workflows, newrelic-fluent-bit-output...
GHSA-WR3J-PWJ9-HQQ6 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, argo-workflows...
CVE-2024-29180 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, argo-workflows...
CVE-2024-21536 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, argo-workflows, kubeflow-pipelines...
CVE-2023-24531 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, argo-workflows, newrelic-fluent-bit-output...
GHSA-C7QV-Q95Q-8V27 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, argo-workflows, kubeflow-pipelines...
GHSA-93MQ-9FFX-83M2 vulnerabilities
Vulnerabilities for packages: kargo, argo-rollouts, nats, amazon-cloudwatch-agent, splunk-otel-collector, k8sgpt, opentelemetry-collector-contrib, tempo, argo-workflows, grafana-alloy, kubeflow-pipelines, opentelemetry-collector...
CVE-2025-29786 vulnerabilities
Vulnerabilities for packages: kargo, argo-rollouts, nats, amazon-cloudwatch-agent, splunk-otel-collector, k8sgpt, opentelemetry-collector-contrib, tempo, argo-workflows, grafana-alloy, kubeflow-pipelines, opentelemetry-collector...
GHSA-93MQ-9FFX-83M2 vulnerabilities
Vulnerabilities for packages: kargo, grafana-alloy, amazon-cloudwatch-agent, argo-cd-fips, eks-distro-fips, kubeflow-pipelines, grafana-alloy-fips, opentelemetry-collector-contrib, argo-rollouts, argo-rollouts-fips, keda, eks-distro, amazon-cloudwatch-agent-fips, nats, tempo-fips,...