MAL-2025-14819 Malicious code in argo-post-purchase (npm)

The package argo-post-purchase was found to contain malicious code...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: external-dns-fips, argo-cd-fips, kubeflow, cloud-provider-aws-fips, xeol-fips, zot, fuse-overlayfs-snapshotter, nfs-subdir-external-provisioner, kepler, aws-node-termination-handler, direnv, guac, pgpool2exporter-fips, conjur-cli, pgpool2exporter, kpt, fulcio, cerbos...

GHSA-76C9-3JPH-RJ3Q vulnerabilities

Vulnerabilities for packages: tileserver-gl, kubeflow-centraldashboard, code-server, argo-workflows, kubeflow-katib, json-server, serve, sqlpad, thingsboard...

CVE-2025-7339 vulnerabilities

Vulnerabilities for packages: tileserver-gl, kubeflow-centraldashboard, code-server, argo-workflows, kubeflow-katib, json-server, serve, sqlpad, thingsboard...

CVE-2025-7339 vulnerabilities

Vulnerabilities for packages: tileserver-gl-fips, argo-workflows, code-server, kubeflow-katib, vitess, thingsboard, gitlab-rails-ce-fips, sqlpad, tileserver-gl, gitlab-rails-ce, serve, json-server, kubeflow-centraldashboard...

GHSA-76C9-3JPH-RJ3Q vulnerabilities

Vulnerabilities for packages: tileserver-gl-fips, argo-workflows, code-server, kubeflow-katib, vitess, thingsboard, gitlab-rails-ce-fips, sqlpad, tileserver-gl, gitlab-rails-ce, serve, json-server, kubeflow-centraldashboard...

CVE-2025-30360 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-katib...

CVE-2025-30359 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-katib...

GHSA-9JGG-88MC-972H vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-katib...

GHSA-4V9V-HFQ4-RM2V vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-katib...

CVE-2025-30359 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-katib...

CVE-2025-30360 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-katib...

GHSA-4V9V-HFQ4-RM2V vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-katib...

GHSA-9JGG-88MC-972H vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-katib...

CVE-2025-4563 vulnerabilities

Vulnerabilities for packages: argo-cd-fips, cluster-autoscaler-fips, longhorn-share-manager-fips, rancher-fleet, argo-cd, calico-fips, azuredisk-csi-fips, azurefile-csi, azuredisk-csi, rancher, cloud-provider-gcp-cloud-controller-manager, calico, cluster-autoscaler, docker-machine-driver-harveste...

GHSA-V6H2-P8H4-QCJW vulnerabilities

Vulnerabilities for packages: code-server, py3-jupyterlab, argo-workflows, prism, renovate, jupyter-base-notebook, sqlpad, kubeflow-pipelines, kubeflow-centraldashboard, tileserver-gl, eslint, rancher-api-ui, vitess, opensearch-dashboards, lerna, npm, ts-patch, langfuse, node-gyp, pulumi...

CVE-2025-5889 vulnerabilities

Vulnerabilities for packages: code-server, py3-jupyterlab, argo-workflows, prism, renovate, jupyter-base-notebook, sqlpad, kubeflow-pipelines, kubeflow-centraldashboard, tileserver-gl, eslint, rancher-api-ui, vitess, opensearch-dashboards, lerna, npm, ts-patch, langfuse, node-gyp, pulumi...

GHSA-V6H2-P8H4-QCJW vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, langfuse-fips, py3-jupyterlab, argo-workflows, emsdk, code-server, tensorflow-cpu-jupyter, ts-patch, gitlab-rails-ce-fips, pulumi, eslint, graalvm, renovate, vitess, drupal, jupyter-base-notebook, rancher-api-ui, sqlpad, tileserver-gl,...

CVE-2025-5889 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, langfuse-fips, py3-jupyterlab, argo-workflows, emsdk, code-server, tensorflow-cpu-jupyter, ts-patch, gitlab-rails-ce-fips, pulumi, eslint, graalvm, renovate, vitess, drupal, jupyter-base-notebook, rancher-api-ui, sqlpad, tileserver-gl,...

The vulnerability of the declarative delivery tool for GitOps on Kubernetes Argo CD, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of GitOps’ continuous delivery tool for Kubernetes Argo CD is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...