Argo Workflows 安全漏洞

Argo Workflows is an open-source, container-native workflow engine for Kubernetes, part of the Argo project. Versions prior to Argo Workflows 4.0.2 and 3.7.11 contained security vulnerabilities. These vulnerabilities stemmed from the workflow template endpoints, which allowed any client to access...

PT-2026-24701

Name of the Vulnerable Software and Affected Versions Argo Workflows versions 2.9.0 through 4.0.1 Argo Workflows version 3.7.11 Description Argo Workflows is a container-native workflow engine for Kubernetes. A user who can submit Workflows can bypass security settings defined in a WorkflowTempla...

PT-2026-24700

Name of the Vulnerable Software and Affected Versions Argo Workflows versions prior to 4.0.2 and 3.7.11 Description Argo Workflows, an open source container-native workflow engine for Kubernetes, has an issue where Workflow templates endpoints allow any client to retrieve WorkflowTemplates and...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: prometheus-adapter-fips, sftpgo-plugin-kms, cadvisor, actions-runner-controller, dynamic-localpv-provisioner, cinder-csi-plugin-fips, falco-no-driver, kyverno-policy-reporter-ui-fips, victorialogs-fips, omnictl-multiarch, kubernetes-dashboard-api-fips,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: prometheus-adapter-fips, sftpgo-plugin-kms, cadvisor, cinder-csi-plugin-fips, falco-no-driver, kyverno-policy-reporter-ui-fips, omnictl-multiarch, kubernetes-dashboard-api-fips, crossplane-provider-aws-sqs-fips, crossplane-provider-terraform, gitlab-workhorse-ce-fips...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: prometheus-adapter-fips, sftpgo-plugin-kms, cadvisor, actions-runner-controller, dynamic-localpv-provisioner, cinder-csi-plugin-fips, falco-no-driver, kyverno-policy-reporter-ui-fips, victorialogs-fips, omnictl-multiarch, kubernetes-dashboard-api-fips,...

GHSA-WF6X-7X77-MVGW vulnerabilities

Vulnerabilities for packages: kubeflow-katib, rancher-api-ui, argo-workflows, vitess...

CVE-2026-29063 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, rancher-api-ui, argo-workflows, vitess...

GHSA-WF6X-7X77-MVGW vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, authentik-fips, argo-workflows, rancher-api-ui, authentik, kubeflow-katib, vitess, gitlab-rails-ce...

CVE-2026-29063 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, authentik-fips, argo-workflows, rancher-api-ui, authentik, kubeflow-katib, vitess, gitlab-rails-ce...

Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.18.4 security update

Important: Red Hat OpenShift GitOps v1.18.4 security update An update is now available for Red Hat OpenShift GitOps. Bug Fixes and Enhancements: GITOPS-8439 CVE-2025-12816 openshift-gitops-1/console-plugin-rhel8: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic...

Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.17.5 security update

Important: Red Hat OpenShift GitOps v1.17.5 security update An update is now available for Red Hat OpenShift GitOps. Bug Fixes and Enhancements: GITOPS-8438 CVE-2025-12816 openshift-gitops-1/console-plugin-rhel8: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic...

CLEANSTART-2026-BY85815 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Multiple security vulnerabilities affect the argo-workflows package. OpenTelemetry-Go is the Go implementation of OpenTelemetry. See references for individual vulnerability details...

CLEANSTART-2026-MW73882 filippo

Multiple security vulnerabilities affect the argo-workflows package. filippo. See references for individual vulnerability details...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: prometheus-adapter-fips, sftpgo-plugin-kms, zot, argo-rollouts-fips, dagger, metrics-server, containerd, falcoctl-fips, eck-operator-fips, k6-operator, grafana-image-renderer, kaniko, ceph-csi-operator, k3s, k8s-agents-operator, cluster-api-provider-vsphere-fips,...

CVE-2026-24051 vulnerabilities

Vulnerabilities for packages: prometheus-adapter-fips, sftpgo-plugin-kms, zot, argo-rollouts-fips, dagger, metrics-server, containerd, falcoctl-fips, eck-operator-fips, k6-operator, grafana-image-renderer, kaniko, ceph-csi-operator, k3s, k8s-agents-operator, cluster-api-provider-vsphere-fips,...

CLEANSTART-2026-LS98939 go-git is a highly extensible git implementation library written in pure Go

Multiple security vulnerabilities affect the argo-cd-fips package. go-git is a highly extensible git implementation library written in pure Go. See references for individual vulnerability details...

CLEANSTART-2026-YW12690 go-git is a highly extensible git implementation library written in pure Go

Multiple security vulnerabilities affect the argo-cd-fips package. go-git is a highly extensible git implementation library written in pure Go. See references for individual vulnerability details...

CLEANSTART-2026-QC30410 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the argo-cd-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

CLEANSTART-2026-DZ05206 go-git is a highly extensible git implementation library written in pure Go

Multiple security vulnerabilities affect the argo-cd-fips package. go-git is a highly extensible git implementation library written in pure Go. See references for individual vulnerability details...