PT-2024-32838

Name of the Vulnerable Software and Affected Versions Argo Workflows version 3.6.0-rc1 Description Due to a race condition in a global variable, the Argo Workflows controller can be made to crash on-command by any user with access to execute a workflow. This issue can be exploited by creating and...

CVE-2024-47827: Concurrent Execution using Shared Resource with Improper Synchronization

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Due to a race condition in a global variable in 3.6.0-rc1, the argo workflows controller can be made to crash on-command by any user with access to execute a workflow. This vulnerabili...

Argo Workflows 安全漏洞

Argo Workflows is an open source container-native workflow engine for Kubernetes from the Argo project. A security vulnerability exists in Argo Workflows version 3.6.0-rc1, which stems from a race condition in a global variable that allows any user authorized to execute workflows to crash the arg...

GHSA-GX9M-WHJM-85JF vulnerabilities

Vulnerabilities for packages: argo-workflows...

CVE-2024-47875 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, argo-workflows...

CVE-2024-47875 vulnerabilities

Vulnerabilities for packages: argo-workflows...

GHSA-PXG6-PF52-XH8X vulnerabilities

Vulnerabilities for packages: kubeflow-katib, opensearch-dashboards, kibana, jitsucom-jitsu, arangodb, gitlab-rails-ce-fips, opensearch-dashboards-fips, kubeflow-centraldashboard, gitlab-rails-ce, kubeflow-pipelines, thingsboard, sqlpad, argo-workflows...

CVE-2024-47764 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, opensearch-dashboards, kibana, jitsucom-jitsu, arangodb, gitlab-rails-ce-fips, opensearch-dashboards-fips, kubeflow-centraldashboard, gitlab-rails-ce, kubeflow-pipelines, thingsboard, sqlpad, argo-workflows...

GHSA-MMHX-HMJR-R674 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards, argo-workflows...

GHSA-MMHX-HMJR-R674 vulnerabilities

Vulnerabilities for packages: argo-workflows...

CVE-2024-45801 vulnerabilities

Vulnerabilities for packages: argo-workflows...

CVE-2024-45801 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards, argo-workflows...

GHSA-9WV6-86V2-598J vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, arangodb, opensearch-dashboards-fips, kubeflow-centraldashboard, kubeflow-pipelines, thingsboard, sqlpad, argo-workflows...

CVE-2024-45296 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, arangodb, opensearch-dashboards-fips, kubeflow-centraldashboard, kubeflow-pipelines, thingsboard, sqlpad, argo-workflows...

GHSA-4VVJ-4CPR-P986 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-workflows, arangodb...

GHSA-4VVJ-4CPR-P986 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-katib...

CVE-2024-43788 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-workflows, arangodb...

CVE-2024-43788 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-katib...

GO-2022-0388 Argo Server TLS requests could be forged by attacker with network access in github.com/argoproj/argo-workflows

Argo Server TLS requests could be forged by attacker with network access in github.com/argoproj/argo-workflows...

GO-2022-0405 Potential privilege escalation on Kubernetes >= v1.19 when the Argo Sever is run with `--auth-mode=client` in github.com/argoproj/argo-workflows

Potential privilege escalation on Kubernetes = v1.19 when the Argo Sever is run with --auth-mode=client in github.com/argoproj/argo-workflows...