690 matches found
CVE-2023-24531 vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-katib, newrelic-fluent-bit-output...
CVE-2024-35255 vulnerabilities
Vulnerabilities for packages: tkn, thanos, nuclei, flux-source-controller, airflow, ksops, sqlpad, falcoctl, tekton-chains, step-ca, up, cortex, cosign, restic, prometheus-operator, grafana-mimir, velero, step, buildkitd, flux, pulumi, terragrunt, boring-registry, opentelemetry-collector, zarf,...
GHSA-952P-6RRQ-RCJV vulnerabilities
Vulnerabilities for packages: py3-captum, arangodb, lerna, renovate, kibana, argo-workflows, kubeflow-pipelines, semaphore, gitlab-rails-ce-fips, ts-patch, opensearch-dashboards, opensearch-dashboards-fips, gitlab-rails-ce, kubeflow-katib...
CVE-2024-4067 vulnerabilities
Vulnerabilities for packages: py3-captum, arangodb, lerna, renovate, kibana, argo-workflows, kubeflow-pipelines, semaphore, gitlab-rails-ce-fips, ts-patch, opensearch-dashboards, opensearch-dashboards-fips, gitlab-rails-ce, kubeflow-katib...
CVE-2024-28180 vulnerabilities
Vulnerabilities for packages: minio, nerdctl, tkn, oauth2-proxy, slsa-verifier, flux-source-controller, caddy, falcoctl, tekton-chains, gomplate, step-ca, cosign, step, aactl, kots, temporal-ui-server, dex, gitsign, melange, terragrunt, grpc-health-probe, zarf, cloudflared, skaffold, vexctl, sops...
CVE-2024-27304 vulnerabilities
Vulnerabilities for packages: wavefront-collector-for-kubernetes, caddy, kube-bench, kube-bench-fips, argo-workflows, src, step-ca, spicedb, caddy-fips, amass, temporal-server-fips, temporal-server, step, kine, falcosidekick-fips, argo-workflows-fips, kots, trillian-fips, ferretdb, trillian, k3s...
CVE-2024-27304 vulnerabilities
Vulnerabilities for packages: kots, src, kube-bench, ferretdb, amass, temporal-server, caddy, kine, spicedb, trillian, step-ca, argo-workflows, k3s, step...
CVE-2024-27289 vulnerabilities
Vulnerabilities for packages: kots, caddy, trillian, step-ca, argo-workflows, step...
BIT-ARGO-WORKFLOWS-2021-37914
In Argo Workflows through 3.1.3, if EXPRESSIONTEMPLATES is enabled and untrusted users are allowed to specify input parameters when running workflows, an attacker may be able to disrupt a workflow because expression template output is evaluated...
BIT-ARGO-WORKFLOWS-2022-29164 Privilege Escalation in argo-workflows
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. In affected versions an attacker can create a workflow which produces a HTML artifact containing an HTML file that contains a script which uses XHR calls to interact with the Argo Serv...
GHSA-8R3F-844C-MC37 vulnerabilities
Vulnerabilities for packages: minio, crossplane-provider-aws-rds, crossplane-provider-aws-s3, terraform-provider-sendgrid, k8sgpt-operator, crossplane-provider-aws-kinesis, k8ssandra-operator, crossplane-provider-aws-sns, nfs-subdir-external-provisioner, kyverno-policy-reporter-kyverno-plugin,...
CVE-2024-24786 vulnerabilities
Vulnerabilities for packages: prometheus-operator-fips, tigera-operator, crossplane-provider-azure, aactl, tigera-operator-fips, cosign, secrets-store-csi-driver-provider-gcp, secrets-store-csi-driver-provider-azure, grpc-health-probe, melange, cri-tools, crossplane-provider-aws-firehose,...
GHSA-7JWH-3VRQ-Q3M8 vulnerabilities
Vulnerabilities for packages: kots, src, kube-bench, ferretdb, amass, temporal-server, caddy, kine, spicedb, trillian, step-ca, argo-workflows, k3s, step...
GHSA-7JWH-3VRQ-Q3M8 vulnerabilities
Vulnerabilities for packages: wavefront-collector-for-kubernetes, caddy, kube-bench, kube-bench-fips, argo-workflows, src, step-ca, spicedb, caddy-fips, amass, temporal-server-fips, temporal-server, step, kine, falcosidekick-fips, argo-workflows-fips, kots, trillian-fips, ferretdb, trillian, k3s...
GHSA-MRWW-27VC-GGHV vulnerabilities
Vulnerabilities for packages: wavefront-collector-for-kubernetes, caddy, kube-bench, kube-bench-fips, argo-workflows, src, step-ca, spicedb, caddy-fips, amass, temporal-server-fips, temporal-server, step, kine, falcosidekick-fips, argo-workflows-fips, kots, trillian-fips, ferretdb, trillian, k3s...
GHSA-M7WR-2XF7-CM9P vulnerabilities
Vulnerabilities for packages: wavefront-collector-for-kubernetes, caddy, argo-workflows, trillian-fips, step-ca, kots, caddy-fips, argo-workflows-fips, trillian, step...
GHSA-XW73-RW38-6VJC vulnerabilities
Vulnerabilities for packages: trivy, kubeflow-katib, loki, aactl, k8sgpt, eksctl, skaffold, up, flux-helm-controller, cosign, k3d, policy-controller-fips, kubescape, helm-operator-fips, argo-workflows, dagger, cadvisor, docker-machine-driver-harvester, falcoctl, flux, ctop, guac, helm, kpt, zot,...
CVE-2024-24557 vulnerabilities
Vulnerabilities for packages: trivy, kubeflow-katib, loki, aactl, k8sgpt, eksctl, skaffold, up, flux-helm-controller, cosign, k3d, policy-controller-fips, kubescape, helm-operator-fips, argo-workflows, dagger, cadvisor, docker-machine-driver-harvester, falcoctl, flux, ctop, guac, helm, kpt, zot,...