1832 matches found
GHSA-X527-X647-Q7GG vulnerabilities
Vulnerabilities for packages: zot, aactl, flux, cert-manager, rancher, kine, containerd, gitea, kubescape, fscrypt, prometheus-operator, nerdctl, external-dns, falco-no-driver, cilium-cli, chisel, opentelemetry-collector, snyk-cli, flux-source-controller, osv-scanner, zarf,...
GHSA-45GG-VH54-H5M9 vulnerabilities
Vulnerabilities for packages: zot, aactl, docker-machine-driver-harvester, flux, cert-manager, rancher, kine, containerd, gitea, kubescape, fscrypt, prometheus-operator, nerdctl, external-dns, falco-no-driver, cilium-cli, chisel, opentelemetry-collector, snyk-cli, flux-source-controller,...
GHSA-QPW4-5X99-6VJP vulnerabilities
Vulnerabilities for packages: gptscript, cert-manager, kine, gitea, scorecard, docker-cli-buildx, gomplate, podman, snyk-cli, cilium, wal-g, opentofu, syft, pulumi-kubernetes-operator, cloud-provider-aws, prometheus, grype, trivy-operator, kaf, kubernetes-dashboard, dagger, kubescape, wolfictl,...
GHSA-89GR-R52H-F8RX vulnerabilities
Vulnerabilities for packages: steampipe, ko, cert-manager, gptscript, kine, gitea, buildah, scorecard, docker-cli-buildx, gomplate, podman, snyk-cli, cosign, crossplane-provider-azure-storage, cilium, wal-g, opentofu, syft, pulumi-kubernetes-operator, cloud-provider-aws,...
GHSA-F5WC-C3C7-36MC vulnerabilities
Vulnerabilities for packages: gptscript, cert-manager, kine, gitea, scorecard, docker-cli-buildx, gomplate, podman, snyk-cli, cilium, opentofu, syft, pulumi-kubernetes-operator, cloud-provider-aws, prometheus, grype, trivy-operator, kaf, kubernetes-dashboard, dagger, kubescape, wolfictl, melange,...
GHSA-JPPX-RXG9-JMRX vulnerabilities
Vulnerabilities for packages: zot, aactl, flux, cert-manager, rancher, kine, containerd, fscrypt, docker-cli-buildx, prometheus-operator, nerdctl, podman, external-dns, falco-no-driver, cilium-cli, opentelemetry-collector, snyk-cli, external-secrets-operator, kyverno, minio, helm, mattermost,...
GHSA-Q4H4-GMJ2-QVW2 vulnerabilities
Vulnerabilities for packages: steampipe, gptscript, cert-manager, ko, kine, gitea, buildah, scorecard, docker-cli-buildx, gomplate, podman, snyk-cli, crossplane-provider-aws-ec2, cosign, crossplane-provider-azure-storage, cilium, crossplane-provider-aws-cloudformation, crossplane-provider-aws-eks...
GO-2026-5751 Argo has Missing Authorization in its Sync ConfigMap Provider in github.com/argoproj/argo-workflows
Argo has Missing Authorization in its Sync ConfigMap Provider in github.com/argoproj/argo-workflows...
GO-2026-5527 Argo Affected by SSO RBAC Delegation Nil Pointer Dereference DoS (gatekeeper.go) in github.com/argoproj/argo-workflows
Argo Affected by SSO RBAC Delegation Nil Pointer Dereference DoS gatekeeper.go in github.com/argoproj/argo-workflows...
GO-2026-5618 Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd
Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd...
GO-2026-5462 Argo Vulnerable to Unauthenticated Memory Exhaustion (DoS) in Webhook Interceptor in github.com/argoproj/argo-workflows
Argo Vulnerable to Unauthenticated Memory Exhaustion DoS in Webhook Interceptor in github.com/argoproj/argo-workflows...
GO-2026-5418 Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd
Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd...
GO-2026-5235 Argo vulnerable to exposure of artifact repository credentials in github.com/argoproj/argo-workflows
Argo vulnerable to exposure of artifact repository credentials in github.com/argoproj/argo-workflows...
GO-2026-5099 ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction in github.com/argoproj/argo-cd
ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction in github.com/argoproj/argo-cd...
GO-2026-5148 Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows Controller in github.com/argoproj/argo-workflows
Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows Controller in github.com/argoproj/argo-workflows...
GO-2026-5072 Argo has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure in github.com/argoproj/argo-workflows
Argo has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure in github.com/argoproj/argo-workflows...
CVE-2026-9595 vulnerabilities
Vulnerabilities for packages: arangodb, kubeflow-katib, gitlab-rails-ce-fips, argo-workflows, gitlab-rails-ce...
GHSA-MX8G-39Q3-5C79 vulnerabilities
Vulnerabilities for packages: arangodb, kubeflow-katib, gitlab-rails-ce-fips, argo-workflows, gitlab-rails-ce...