467 matches found
CVE-2024-35255 vulnerabilities
Vulnerabilities for packages: trivy, guac, hugo-extended, zarf, nuclei, wal-g, step-ca, secrets-store-csi-driver-provider-azure, up, harbor-registry, tekton-chains, flux-kustomize-controller, velero, external-dns, trino, argo-workflows, opentelemetry-collector-contrib, spire-server, sops, tkn,...
GHSA-952P-6RRQ-RCJV vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, renovate, argo-workflows, semaphore, gitlab-rails-ce, ts-patch, kibana, gitlab-rails-ce-fips, kubeflow-katib, kubeflow-pipelines, opensearch-dashboards-fips, py3-captum, lerna...
CVE-2024-4067 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, renovate, argo-workflows, semaphore, gitlab-rails-ce, ts-patch, kibana, gitlab-rails-ce-fips, kubeflow-katib, kubeflow-pipelines, opensearch-dashboards-fips, py3-captum, lerna...
CVE-2024-28180 vulnerabilities
Vulnerabilities for packages: dgraph, guac, zarf, cloudflared, step-ca, tekton-chains, flux-kustomize-controller, gomplate, temporal, grpc-health-probe, argo-workflows, minio, spire-server, sops, tkn, rekor, dex, step, bank-vaults, cosign, frp, temporal-ui-server, fulcio, rook, skopeo, wolfictl,...
CVE-2024-27304 vulnerabilities
Vulnerabilities for packages: caddy, kine, temporal-server-fips, trillian-fips, caddy-fips, temporal-server, kube-bench-fips, argo-workflows, k3s, falcosidekick-fips, step, trillian, src, step-ca, kots, spicedb, amass, kube-bench, wavefront-collector-for-kubernetes, ferretdb, argo-workflows-fips...
CVE-2024-27304 vulnerabilities
Vulnerabilities for packages: k3s, spicedb, trillian, step-ca, step, kine, ferretdb, temporal-server, src, argo-workflows, kots, amass, kube-bench, caddy...
CVE-2024-27289 vulnerabilities
Vulnerabilities for packages: trillian, step-ca, step, argo-workflows, kots, caddy...
BIT-ARGO-WORKFLOWS-2021-37914
In Argo Workflows through 3.1.3, if EXPRESSIONTEMPLATES is enabled and untrusted users are allowed to specify input parameters when running workflows, an attacker may be able to disrupt a workflow because expression template output is evaluated...
BIT-ARGO-WORKFLOWS-2022-29164 Privilege Escalation in argo-workflows
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. In affected versions an attacker can create a workflow which produces a HTML artifact containing an HTML file that contains a script which uses XHR calls to interact with the Argo Serv...
GHSA-8R3F-844C-MC37 vulnerabilities
Vulnerabilities for packages: trivy, zarf, php-fpmexporter, crossplane-provider-family-aws, falcosidekick, up, cert-exporter, metacontroller, prometheus-adapter, tekton-chains, ip-masq-agent, external-dns, kuberay-operator, crossplane-provider-aws-memorydb, spire-server, k8sgpt,...
CVE-2024-24786 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-s3, tekton-chains, crossplane-provider-family-aws, kargo, vexctl, k8sgpt-operator, cosign, pulumi-language-dotnet, crossplane-provider-aws-rds, haproxy-ingress, step, step-ca, external-secrets-fips, chartmuseum,...
GHSA-7JWH-3VRQ-Q3M8 vulnerabilities
Vulnerabilities for packages: k3s, spicedb, trillian, step-ca, step, kine, ferretdb, temporal-server, src, argo-workflows, kots, amass, kube-bench, caddy...
GHSA-7JWH-3VRQ-Q3M8 vulnerabilities
Vulnerabilities for packages: caddy, kine, temporal-server-fips, trillian-fips, caddy-fips, temporal-server, kube-bench-fips, argo-workflows, k3s, falcosidekick-fips, step, trillian, src, step-ca, kots, spicedb, amass, kube-bench, wavefront-collector-for-kubernetes, ferretdb, argo-workflows-fips...
GHSA-MRWW-27VC-GGHV vulnerabilities
Vulnerabilities for packages: caddy, kine, temporal-server-fips, trillian-fips, caddy-fips, temporal-server, kube-bench-fips, argo-workflows, k3s, falcosidekick-fips, step, trillian, src, step-ca, kots, spicedb, amass, kube-bench, wavefront-collector-for-kubernetes, ferretdb, argo-workflows-fips...
GHSA-M7WR-2XF7-CM9P vulnerabilities
Vulnerabilities for packages: caddy, step, argo-workflows, trillian-fips, trillian, wavefront-collector-for-kubernetes, step-ca, kots, caddy-fips, argo-workflows-fips...
GHSA-XW73-RW38-6VJC vulnerabilities
Vulnerabilities for packages: zarf, aactl, ko-fips, helm, tekton-chains, gitsign, timoni, kargo, cri-tools, vexctl, kubevela, cosign-fips, cadvisor-fips, cosign, skaffold, argo-workflows, k3s, helm-fips, flux-helm-controller, helm-operator, kpt, kubescape, buildkitd, eksctl,...
CVE-2024-24557 vulnerabilities
Vulnerabilities for packages: zarf, aactl, ko-fips, helm, tekton-chains, gitsign, timoni, kargo, cri-tools, vexctl, kubevela, cosign-fips, cadvisor-fips, cosign, skaffold, argo-workflows, k3s, helm-fips, flux-helm-controller, helm-operator, kpt, kubescape, buildkitd, eksctl,...
GHSA-3F2Q-6294-FMQ5 vulnerabilities
Vulnerabilities for packages: argo-workflows, flux-notification-controller, argo-events, snyk-cli, argo-events-fips, task, pulumi-kubernetes-operator, melange...