GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: loki, rancher-agent, skaffold, trivy, trivy-operator, rancher, kubernetes, snyk-cli, cloud-provider-aws, flux, kaf, kots, osv-scanner, cilium-cli, k3s, cert-manager, prometheus, docker-machine-driver-harvester, fscrypt, cilium, minio, nerdctl, kubescape, chisel,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: fulcio, rancher, crossplane-provider-aws-memorydb, cilium-cli, crossplane-provider-family-azure, k3s, docker, kubescape, terraform-provider-azapi, pulumi, policy-controller, wal-g, crossplane-provider-aws-sns, argocd-image-updater, syft, sops,...

GO-2026-5751 Argo has Missing Authorization in its Sync ConfigMap Provider in github.com/argoproj/argo-workflows

Argo has Missing Authorization in its Sync ConfigMap Provider in github.com/argoproj/argo-workflows...

GO-2026-5618 Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd

Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd...

GO-2026-5527 Argo Affected by SSO RBAC Delegation Nil Pointer Dereference DoS (gatekeeper.go) in github.com/argoproj/argo-workflows

Argo Affected by SSO RBAC Delegation Nil Pointer Dereference DoS gatekeeper.go in github.com/argoproj/argo-workflows...

GO-2026-5418 Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd

Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd...

GO-2026-5462 Argo Vulnerable to Unauthenticated Memory Exhaustion (DoS) in Webhook Interceptor in github.com/argoproj/argo-workflows

Argo Vulnerable to Unauthenticated Memory Exhaustion DoS in Webhook Interceptor in github.com/argoproj/argo-workflows...

GO-2026-5235 Argo vulnerable to exposure of artifact repository credentials in github.com/argoproj/argo-workflows

Argo vulnerable to exposure of artifact repository credentials in github.com/argoproj/argo-workflows...

GO-2026-5099 ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction in github.com/argoproj/argo-cd

ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction in github.com/argoproj/argo-cd...

GO-2026-5148 Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows Controller in github.com/argoproj/argo-workflows

Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows Controller in github.com/argoproj/argo-workflows...

GO-2026-5072 Argo has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure in github.com/argoproj/argo-workflows

Argo has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure in github.com/argoproj/argo-workflows...

CVE-2026-9595 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-workflows...

GHSA-MX8G-39Q3-5C79 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-workflows...

GHSA-MX8G-39Q3-5C79 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-workflows...

CVE-2026-9595 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-workflows...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: prometheus-adapter-fips, cadvisor, zot, crossplane-provider-azure-powerbidedicated, crossplane-provider-azure-security, crossplane-provider-azure-servicebus, crossplane-provider-azure-streamanalytics, crossplane-provider-aws-sqs-fips, crossplane-provider-terraform,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: prometheus-adapter-fips, cadvisor, zot, crossplane-provider-azure-powerbidedicated, crossplane-provider-azure-security, crossplane-provider-azure-servicebus, crossplane-provider-azure-streamanalytics, crossplane-provider-aws-sqs-fips, crossplane-provider-terraform,...

ROOT-APP-GOBINARY-CVE-2026-42296 CVE-2026-42296 in rootio-github.com/argoproj/argo-workflows/v3 - Patched by Root

Root has patched CVE-2026-42296 in the rootio-github.com/argoproj/argo-workflows/v3 package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2025-62156 CVE-2025-62156 in rootio-github.com/argoproj/argo-workflows/v3 - Patched by Root

Root has patched CVE-2025-62156 in the rootio-github.com/argoproj/argo-workflows/v3 package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2024-53862 CVE-2024-53862 in rootio-github.com/argoproj/argo-workflows/v3 - Patched by Root

Root has patched CVE-2024-53862 in the rootio-github.com/argoproj/argo-workflows/v3 package for Root:Go. Multiple fixed versions available...