690 matches found
CVE-2024-52799
Argo Workflows Chart is used to set up argo and its needed dependencies through one command. Prior to 0.44.0, the workflow-role has excessive privileges, the worst being create pods/exec, which will allow kubectl exec into any Pod in the same namespace, i.e. arbitrary code execution within those...
PT-2025-41938
Name of the Vulnerable Software and Affected Versions Argo Workflows versions prior to 3.6.12 Argo Workflows versions 3.7.0 through 3.7.2 Description Argo Workflows is a container-native workflow engine for Kubernetes. Versions prior to 3.6.12 and versions 3.7.0 through 3.7.2 expose artifact...
BIT-ARGO-WORKFLOWS-2024-53862 Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. When using --auth-mode=client, Archived Workflows can be retrieved with a fake or spoofed token via the GET Workflow endpoint: /api/v1/workflows/namespace/name or when using...
CVE-2024-29180 vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-katib...
CVE-2024-21536 vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-pipelines, kubeflow-katib...
GHSA-WR3J-PWJ9-HQQ6 vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-katib...
GHSA-C7QV-Q95Q-8V27 vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-pipelines, kubeflow-katib...
GHSA-CWPG-QGC6-JXVQ vulnerabilities
Vulnerabilities for packages: kubeflow-katib, newrelic-fluent-bit-output, argo-workflows...
GHSA-WR3J-PWJ9-HQQ6 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, argo-workflows, arangodb...
CVE-2024-29180 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, argo-workflows, arangodb...
CVE-2024-21536 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, argo-workflows, arangodb, kubeflow-pipelines...
CVE-2023-24531 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, newrelic-fluent-bit-output, argo-workflows...
GHSA-C7QV-Q95Q-8V27 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, argo-workflows, arangodb, kubeflow-pipelines...
CVE-2025-29786 vulnerabilities
Vulnerabilities for packages: nats, k8sgpt, argo-workflows, splunk-otel-collector, opentelemetry-collector, kubeflow-pipelines, grafana-alloy, kargo, argo-rollouts, opentelemetry-collector-contrib, amazon-cloudwatch-agent...
GHSA-93MQ-9FFX-83M2 vulnerabilities
Vulnerabilities for packages: nats, k8sgpt, argo-workflows, splunk-otel-collector, opentelemetry-collector, kubeflow-pipelines, grafana-alloy, kargo, argo-rollouts, opentelemetry-collector-contrib, amazon-cloudwatch-agent...
GHSA-93MQ-9FFX-83M2 vulnerabilities
Vulnerabilities for packages: k8sgpt, amazon-cloudwatch-agent-fips, splunk-otel-collector-fips, opentelemetry-collector-contrib-fips, argo-workflows, splunk-otel-collector, opentelemetry-collector-fips, amazon-cloudwatch-agent, grafana-alloy, grafana-alloy-fips, argo-workflows-fips, keda, nats,...
GHSA-67MH-4WV8-2F99 vulnerabilities
Vulnerabilities for packages: argo-workflows, vite, kubeflow-katib...
GHSA-67MH-4WV8-2F99 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, gitlab-rails-ce-fips, gitlab-rails-ce, argo-workflows, vite...
CVE-2022-29164
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. In affected versions an attacker can create a workflow which produces a HTML artifact containing an HTML file that contains a script which uses XHR calls to interact with the Argo Serv...