1832 matches found
CLEANSTART-2026-QH76136 Security fixes in argo-workflows-fips 4.0.6-r1
Package argo-workflows-fips version 4.0.6-r1 fixes 8 vulnerabilities: ghsa-crhj-59gh-8x96, ghsa-389r-gv7p-r3rp, ghsa-m7cr-m3pv-hgrp, ghsa-w5pp-99ch-qj29, CVE-2026-45022...
CLEANSTART-2026-DT69250 Security fixes in argo-cd 3.4.5-r1
Package argo-cd version 3.4.5-r1 fixes 9 vulnerabilities: ghsa-jxpm-75mh-9fp7, ghsa-8xwf-rjm4-xvhv, ghsa-vh4v-2xq2-g5cg, ghsa-xf85-363p-868w, CVE-2026-50151...
CVE-2026-18621
A flaw was found in Data Science Pipelines DSP. An attacker with namespace editor privileges can bypass security hardening by submitting a malicious Argo Workflow through the V1 API path. This allows the API server to create pods with elevated privileges, acting as a 'confused deputy' on behalf o...
CVE-2026-18621 Data-sciences-pipeline: dsp: v1 argo template path accepts arbitrary workflow spec, bypassing all v2 security hardening
A flaw was found in Data Science Pipelines DSP. An attacker with namespace editor privileges can bypass security hardening by submitting a malicious Argo Workflow through the V1 API path. This allows the API server to create pods with elevated privileges, acting as a 'confused deputy' on behalf o...
CVE-2026-18621
CVE-2026-18621 affects Data Science Pipelines (DSP). A flaw allows a user with namespace editor privileges to bypass hardening by submitting a malicious Argo Workflow via the V1 API path, enabling the API server to create pods with elevated privileges (a confused-deputy scenario). Successful expl...
EUVD-2026-55814
A flaw was found in Data Science Pipelines DSP. An attacker with namespace editor privileges can bypass security hardening by submitting a malicious Argo Workflow through the V1 API path. This allows the API server to create pods with elevated privileges, acting as a 'confused deputy' on behalf o...
CVE-2026-18621 Data-sciences-pipeline: dsp: v1 argo template path accepts arbitrary workflow spec, bypassing all v2 security hardening
A flaw was found in Data Science Pipelines DSP. An attacker with namespace editor privileges can bypass security hardening by submitting a malicious Argo Workflow through the V1 API path. This allows the API server to create pods with elevated privileges, acting as a 'confused deputy' on behalf o...
CVE-2026-18621
A flaw was found in Data Science Pipelines DSP. An attacker with namespace editor privileges can bypass security hardening by submitting a malicious Argo Workflow through the V1 API path. This allows the API server to create pods with elevated privileges, acting as a 'confused deputy' on behalf o...
CVE-2026-18621
A flaw was found in Data Science Pipelines DSP. An attacker with namespace editor privileges can bypass security hardening by submitting a malicious Argo Workflow through the V1 API path. This allows the API server to create pods with elevated privileges, acting as a 'confused deputy' on behalf o...
PT-2026-69960
Name of the Vulnerable Software and Affected Versions Data Science Pipelines affected versions not specified Description An attacker with namespace editor privileges can bypass security hardening by submitting a malicious Argo Workflow through the 'V1 API' path. This issue allows the API server t...
SUSE CVE-2026-45737
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 3.2.0 until 3.2.12, 3.3.10, and 3.4.2, Argo CD ServerSideDiff can expose Kubernetes Secret values embedded in the kubectl.kubernetes.io/last-applied-configuration annotation because HideSecretDatatarget, live, ... does...
SUSE CVE-2026-45738
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Prior to 3.2.12, 3.3.10, and 3.4.2, Argo CD users with application write access can set link.argocd.argoproj.io/ annotations whose pipe-separated values are rendered by...
CLEANSTART-2026-PN54364 Security fixes in argo-workflows-fips 3.7.10-r0
Package argo-workflows-fips version 3.7.10-r0 fixes 2 vulnerabilities: ghsa-fw7p-63qq-7hpr, CVE-2026-26958...
CLEANSTART-2026-YM49492 Security fixes in argo-cd 3.0.16-r0
Package argo-cd version 3.0.16-r0 fixes 2 vulnerabilities: ghsa-93mq-9ffx-83m2, ghsa-2v5j-vhc3-9cwm...
CLEANSTART-2026-CQ37480 Security fixes in argo-workflows-fips 3.6.15-r1
Package argo-workflows-fips version 3.6.15-r1 fixes 2 vulnerabilities: ghsa-cfpf-hrx2-8rv6, ghsa-2x5j-vhc8-9cwm...
CLEANSTART-2026-EK75112 Security fixes in argo-workflows 3.7.10-r4
Package argo-workflows version 3.7.10-r4 fixes 2 vulnerabilities: ghsa-p436-gjf2-799p, CVE-2025-15558...
CLEANSTART-2026-ZW70206 Security fixes in argo-workflows-fips 3.7.0-r0
Package argo-workflows-fips version 3.7.0-r0 fixes 3 vulnerabilities: CVE-2025-47907, CVE-2025-0913, CVE-2025-4673...
CLEANSTART-2026-AG71867 Security fixes in argo-cd-fips 3.1.11-r0
Package argo-cd-fips version 3.1.11-r0 fixes 4 vulnerabilities: CVE-2025-68121, CVE-2025-61732, CVE-2026-1229, CVE-2026-25934...