812 matches found
CVE-2023-24531 vulnerabilities
Vulnerabilities for packages: newrelic-fluent-bit-output, kubeflow-katib, argo-workflows...
CVE-2024-35255 vulnerabilities
Vulnerabilities for packages: k8sgpt, timestamp-authority, sqlpad, rclone, tekton-chains, opentelemetry-collector-contrib, py3-azure-identity, secrets-store-csi-driver-provider-azure, falcoctl, flux-kustomize-controller, tkn, boring-registry, buildkitd, opentelemetry-collector, trivy, rook, up,...
GHSA-952P-6RRQ-RCJV vulnerabilities
Vulnerabilities for packages: arangodb, kubeflow-katib, gitlab-rails-ce-fips, argo-workflows, kubeflow-pipelines, opensearch-dashboards-fips, renovate, kibana, gitlab-rails-ce, semaphore, ts-patch, opensearch-dashboards, py3-captum, lerna...
CVE-2024-4067 vulnerabilities
Vulnerabilities for packages: arangodb, kubeflow-katib, gitlab-rails-ce-fips, argo-workflows, kubeflow-pipelines, opensearch-dashboards-fips, renovate, kibana, gitlab-rails-ce, semaphore, ts-patch, opensearch-dashboards, py3-captum, lerna...
CVE-2024-28180 vulnerabilities
Vulnerabilities for packages: timestamp-authority, k3s, gitsign, kubernetes-dashboard, ko, oauth2-proxy, rabbitmq-messaging-topology-operator, caddy, cloudflared, dgraph, tekton-chains, kube-rbac-proxy, kargo, falcoctl, flux-kustomize-controller, tkn, slsa-verifier, grpc-health-probe, minio, rook...
CVE-2024-27304 vulnerabilities
Vulnerabilities for packages: temporal-server, kine, argo-workflows, falcosidekick-fips, temporal-server-fips, k3s, step, kots, wavefront-collector-for-kubernetes, argo-workflows-fips, kube-bench, spicedb, src, step-ca, caddy, trillian, amass, trillian-fips, caddy-fips, kube-bench-fips, ferretdb...
CVE-2024-27289 vulnerabilities
Vulnerabilities for packages: step, kots, caddy, step-ca, argo-workflows, trillian...
CVE-2024-27304 vulnerabilities
Vulnerabilities for packages: k3s, ferretdb, step, kots, caddy, spicedb, argo-workflows, step-ca, temporal-server, src, amass, kube-bench, kine, trillian...
BIT-ARGO-WORKFLOWS-2021-37914
In Argo Workflows through 3.1.3, if EXPRESSIONTEMPLATES is enabled and untrusted users are allowed to specify input parameters when running workflows, an attacker may be able to disrupt a workflow because expression template output is evaluated...
BIT-ARGO-WORKFLOWS-2022-29164 Privilege Escalation in argo-workflows
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. In affected versions an attacker can create a workflow which produces a HTML artifact containing an HTML file that contains a script which uses XHR calls to interact with the Argo Serv...
GHSA-8R3F-844C-MC37 vulnerabilities
Vulnerabilities for packages: tflint, volume-modifier-for-k8s, gitness, k3s, oauth2-proxy, kubernetes-dashboard, nodetaint, terraform-provider-google, caddy, runc, crossplane-provider-aws-ec2, ip-masq-agent, local-path-provisioner, secrets-store-csi-driver-provider-azure,...
CVE-2024-24786 vulnerabilities
Vulnerabilities for packages: prometheus-mongodb-exporter, grpcurl, prometheus-postgres-exporter-fips, crossplane-provider-aws-lambda, prometheus-nats-exporter, goreleaser, aws-flb-kinesis-fips, argo-workflows-fips, newrelic-infra-operator, tkn, trillian, crossplane-provider-aws-cloudwatchlogs,...
GHSA-7JWH-3VRQ-Q3M8 vulnerabilities
Vulnerabilities for packages: temporal-server, kine, argo-workflows, falcosidekick-fips, temporal-server-fips, k3s, step, kots, wavefront-collector-for-kubernetes, argo-workflows-fips, kube-bench, spicedb, src, step-ca, caddy, trillian, amass, trillian-fips, caddy-fips, kube-bench-fips, ferretdb...
GHSA-7JWH-3VRQ-Q3M8 vulnerabilities
Vulnerabilities for packages: k3s, ferretdb, step, kots, caddy, spicedb, argo-workflows, step-ca, temporal-server, src, amass, kube-bench, kine, trillian...
GHSA-MRWW-27VC-GGHV vulnerabilities
Vulnerabilities for packages: temporal-server, kine, argo-workflows, falcosidekick-fips, temporal-server-fips, k3s, step, kots, wavefront-collector-for-kubernetes, argo-workflows-fips, kube-bench, spicedb, src, step-ca, caddy, trillian, amass, trillian-fips, caddy-fips, kube-bench-fips, ferretdb...
GHSA-M7WR-2XF7-CM9P vulnerabilities
Vulnerabilities for packages: step, step-ca, caddy, trillian, kots, argo-workflows, caddy-fips, trillian-fips, argo-workflows-fips, wavefront-collector-for-kubernetes...
GHSA-XW73-RW38-6VJC vulnerabilities
Vulnerabilities for packages: ctop, helm-operator-fips, up, zarf, loki, scorecard, helm-fips, argo-workflows, eksctl, cadvisor-fips, k8sgpt, slsa-verifier, kargo, pulumi, trivy, helm, k3s, kubeflow-katib, vexctl, chartmuseum, goreleaser, kots, guac, gitsign, argo-workflows-fips, zot, tekton-chain...
CVE-2024-24557 vulnerabilities
Vulnerabilities for packages: ctop, helm-operator-fips, up, zarf, loki, scorecard, helm-fips, argo-workflows, eksctl, cadvisor-fips, k8sgpt, slsa-verifier, kargo, pulumi, trivy, helm, k3s, kubeflow-katib, vexctl, chartmuseum, goreleaser, kots, guac, gitsign, argo-workflows-fips, zot, tekton-chain...