1773 matches found
GHSA-3XC5-WRHM-F963 vulnerabilities
Vulnerabilities for packages: goreleaser, xeol, trivy, nuclei, external-secrets-operator, skaffold, melange, gitsign, terragrunt, osv-scanner, tfsec, grafana-alloy, trivy-operator, gomplate, flux, gitlab-runner, flux-image-automation-controller, gitea, wolfictl, pulumi, argo-cd, syft, cerbos,...
GHSA-R4Q5-VMMM-2653 vulnerabilities
Vulnerabilities for packages: argo-workflows, configurable-http-proxy, saf, lerna, kubeflow-pipelines, nextcloud-server, opensearch-dashboards, code-server, langfuse, kubeflow-katib, thingsboard, prism...
CVE-2026-35469 vulnerabilities
Vulnerabilities for packages: skaffold, kcp-fips, dynamic-localpv-provisioner-fips, istio-fips, argocd-image-updater-fips, percona-server-mongodb-operator-fips, kiali, plugin-barman-cloud, gpu-operator-fips, istio, gitlab-runner-fips, jitsucom-bulker, aws-node-termination-handler,...
CLEANSTART-2026-BH97849 gRPC-Go is the Go language implementation of gRPC
Multiple security vulnerabilities affect the argo-cd package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CVE-2026-6388 Argocd-image-updater: argocd image updater: cross-namespace privilege escalation via insufficient namespace validation
A flaw was found in ArgoCD Image Updater. This vulnerability allows an attacker, with permissions to create or modify an ImageUpdater resource in a multi-tenant environment, to bypass namespace boundaries. By exploiting insufficient validation, the attacker can trigger unauthorized image updates ...
CVE-2026-6388 Argocd-image-updater: argocd image updater: cross-namespace privilege escalation via insufficient namespace validation
A flaw was found in ArgoCD Image Updater. This vulnerability allows an attacker, with permissions to create or modify an ImageUpdater resource in a multi-tenant environment, to bypass namespace boundaries. By exploiting insufficient validation, the attacker can trigger unauthorized image updates ...
CVE-2026-6388
A flaw was found in ArgoCD Image Updater. This vulnerability allows an attacker, with permissions to create or modify an ImageUpdater resource in a multi-tenant environment, to bypass namespace boundaries. By exploiting insufficient validation, the attacker can trigger unauthorized image updates ...
CVE-2026-6388
The CVE describes a vulnerability in ArgoCD Image Updater where a user with rights to create/modify an ImageUpdater in a multi-tenant environment can bypass namespace boundaries due to insufficient validation. This leads to cross-namespace privilege escalation and unauthorized image updates on ap...
CVE-2026-6388
A flaw was found in ArgoCD Image Updater. This vulnerability allows an attacker, with permissions to create or modify an ImageUpdater resource in a multi-tenant environment, to bypass namespace boundaries. By exploiting insufficient validation, the attacker can trigger unauthorized image updates ...
PT-2026-33180
A flaw was found in ArgoCD Image Updater. This vulnerability allows an attacker, with permissions to create or modify an ImageUpdater resource in a multi-tenant environment, to bypass namespace boundaries. By exploiting insufficient validation, the attacker can trigger unauthorized image updates ...
GHSA-7MR4-XJXG-34G6 vulnerabilities
Vulnerabilities for packages: argo-rollouts, trivy, oauth2-proxy, external-secrets-operator, aactl, kubernetes-dashboard-web, flux, gitlab-kas, sftpgo, cluster-autoscaler, prometheus-operator, net-kourier, argo-cd, syft, snyk-cli, trillian, cis-operator, secrets-store-csi-driver-provider-aws,...
CVE-2025-59538 vulnerabilities
Vulnerabilities for packages: argo-cd...
GHSA-WP4P-9PXH-CGX2 vulnerabilities
Vulnerabilities for packages: argo-cd...
CVE-2025-59537 vulnerabilities
Vulnerabilities for packages: argo-cd...
GHSA-GPX4-37G2-C8PV vulnerabilities
Vulnerabilities for packages: argo-cd...
CVE-2025-59531 vulnerabilities
Vulnerabilities for packages: argo-cd...
GHSA-F9GQ-PRRC-HRHC vulnerabilities
Vulnerabilities for packages: argo-cd...
CVE-2026-34986 vulnerabilities
Vulnerabilities for packages: spicedb-fips, skaffold, podman, openbao, boring-registry-fips, kiali, envconsul, kaniko-fips, boring-registry, reports-server, kubo-fips, kubescape-server, kyverno-notation-aws, cloudprober-fips, velero-plugin-for-gcp-fips, kots, packer, cloudflared, k9s,...
CVE-2026-2950 vulnerabilities
Vulnerabilities for packages: foxx-cli, opensearch-dashboards-fips, sqlpad, kubeflow-pipelines, ts-patch, jitsucom-jitsu, kibana, npm, saf, code-server, json-server, py3-jupyterlab, redisinsight, langfuse-fips, kubeflow-centraldashboard, argo-workflows, renovate, arangodb, gitlab-rails-ce-fips,...
GHSA-R5FR-RJXR-66JC vulnerabilities
Vulnerabilities for packages: foxx-cli, opensearch-dashboards-fips, sqlpad, kubeflow-pipelines, ts-patch, jitsucom-jitsu, kibana, npm, saf, code-server, json-server, py3-jupyterlab, redisinsight, langfuse-fips, kubeflow-centraldashboard, argo-workflows, renovate, arangodb, gitlab-rails-ce-fips,...