1772 matches found
CVE-2026-23960 Argo Workflows affected by stored XSS in the artifact directory listing
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Prior to versions 3.6.17 and 3.7.8, stored XSS in the artifact directory listing allows any workflow author to execute arbitrary JavaScript in another user’s browser under the Argo...
CVE-2026-23960 Argo Workflows affected by stored XSS in the artifact directory listing
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Prior to versions 3.6.17 and 3.7.8, stored XSS in the artifact directory listing allows any workflow author to execute arbitrary JavaScript in another user’s browser under the Argo...
CVE-2026-23960
CVE-2026-23960 affects Argo Workflows prior to versions 3.6.17 and 3.7.8. A stored XSS vulnerability in the artifact directory listing can cause arbitrary JavaScript to run in another user’s browser within the Argo Server origin, enabling actions with the victim’s privileges. Affected component: ...
CVE-2026-23960 Argo Workflows affected by stored XSS in the artifact directory listing
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Prior to versions 3.6.17 and 3.7.8, stored XSS in the artifact directory listing allows any workflow author to execute arbitrary JavaScript in another user’s browser under the Argo...
GHSA-CV78-6M8Q-PH82 Argo Workflows affected by stored XSS in the artifact directory listing
Summary Stored XSS in the artifact directory listing allows any workflow author to execute arbitrary JavaScript in another user’s browser under the Argo Server origin, enabling API actions with the victim’s privileges. Details The directory listing response in server/artifacts/artifactserver.go...
EUVD-2026-3596
Argo Workflows affected by stored XSS in the artifact directory listing...
PT-2026-3870
Name of the Vulnerable Software and Affected Versions Argo Workflows versions prior to 3.6.17 and prior to 3.7.8 Description Argo Workflows contains a stored cross-site scripting XSS issue in the artifact directory listing. This allows a workflow author to execute arbitrary JavaScript in another...
Argo Workflows Cross-Site Script Vulnerabilities
Argo Workflows is an open-source, container-native workflow engine for Kubernetes, part of the Argo project. Versions prior to Argo Workflows 3.6.17 and 3.7.8 had a cross-site scripting vulnerability. This vulnerability stemmed from the presence of a stored cross-site script in the artifact...
CVE-2022-31054
Argo Events is an event-driven workflow automation framework for Kubernetes. Prior to version 1.7.1, several HandleRoute endpoints make use of the deprecated ioutil.ReadAll. ioutil.ReadAll reads all the data into memory. As such, an attacker who sends a large request to the Argo Events server wil...
GHSA-V8WX-V5JQ-QHHW vulnerabilities
Vulnerabilities for packages: argo-cd...
GHSA-JWV5-8MQV-G387 vulnerabilities
Vulnerabilities for packages: argo-cd...
GHSA-G623-JCGG-MHMM vulnerabilities
Vulnerabilities for packages: argo-cd...
CVE-2024-29893 vulnerabilities
Vulnerabilities for packages: argo-cd...
CVE-2025-47908 vulnerabilities
Vulnerabilities for packages: timestamp-authority, grafana-mimir, fulcio, prometheus-alertmanager, rekor, cortex...
CVE-2023-50726 vulnerabilities
Vulnerabilities for packages: argo-cd...
CVE-2024-28175 vulnerabilities
Vulnerabilities for packages: argo-cd...
GHSA-JHWX-MHWW-RGC3 vulnerabilities
Vulnerabilities for packages: argo-cd...
GHSA-2VGG-9H6W-M454 vulnerabilities
Vulnerabilities for packages: argo-cd...