1769 matches found
Argo Events 安全漏洞
Argo Events is an event-driven workflow automation framework for Kubernetes open-sourced by Argo Project. A security vulnerability exists in versions prior to Argo Events v1.9.6 that stems from a user with the permission to create or modify EventSource and Sensor can gain privileged access to the...
Privilege Chaining
Overview Affected versions of this package are vulnerable to Privilege Chaining through the spec.template.container configuration in the EventSource and Sensor custom resources. An attacker can gain privileged access to the host system and cluster by injecting commands into a container template...
Privilege Chaining
Overview Affected versions of this package are vulnerable to Privilege Chaining through the spec.template.container configuration in the EventSource and Sensor custom resources. An attacker can gain privileged access to the host system and cluster by injecting commands into a container template...
Privilege Chaining
Overview Affected versions of this package are vulnerable to Privilege Chaining through the spec.template.container configuration in the EventSource and Sensor custom resources. An attacker can gain privileged access to the host system and cluster by injecting commands into a container template...
BIT-ARGO-WORKFLOWS-2024-53862 Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. When using --auth-mode=client, Archived Workflows can be retrieved with a fake or spoofed token via the GET Workflow endpoint: /api/v1/workflows/namespace/name or when using...
PT-2025-16385
Name of the Vulnerable Software and Affected Versions Argo Events versions prior to 1.9.6 Description Argo Events is an event-driven workflow automation framework for Kubernetes. A user with permission to create or modify EventSource and Sensor custom resources can gain privileged access to the...
CVE-2024-29180 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, argo-workflows...
CVE-2025-29923 vulnerabilities
Vulnerabilities for packages: oauth2-proxy, falcosidekick, splunk-otel-collector, kots, fluent-bit-plugin-loki, gitea, atlantis, authservice...
CVE-2024-21536 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, kubeflow-katib, argo-workflows...
GHSA-WR3J-PWJ9-HQQ6 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, argo-workflows...
GHSA-92CP-5422-2MW7 vulnerabilities
Vulnerabilities for packages: oauth2-proxy, falcosidekick, splunk-otel-collector, kots, fluent-bit-plugin-loki, gitea, atlantis, authservice...
GHSA-C7QV-Q95Q-8V27 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, kubeflow-katib, argo-workflows...
CVE-2024-29180 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, argo-workflows...
CVE-2025-29923 vulnerabilities
Vulnerabilities for packages: gitea-fips, keda, dapr-fips, loki, dapr, splunk-otel-collector-fips, gitea, argo-cd, loki-fips, falcosidekick-fips, argo-cd-fips, falcosidekick, mattermost-fips, kots, fluent-bit-plugin-loki, opentelemetry-collector-contrib-fips, oauth2-proxy, rekor-fips, juicefs,...
GHSA-CWPG-QGC6-JXVQ vulnerabilities
Vulnerabilities for packages: kubeflow-katib, newrelic-fluent-bit-output, argo-workflows...
GHSA-WR3J-PWJ9-HQQ6 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, argo-workflows...
GHSA-92CP-5422-2MW7 vulnerabilities
Vulnerabilities for packages: gitea-fips, keda, dapr-fips, loki, dapr, splunk-otel-collector-fips, gitea, argo-cd, loki-fips, falcosidekick-fips, argo-cd-fips, falcosidekick, mattermost-fips, kots, fluent-bit-plugin-loki, opentelemetry-collector-contrib-fips, oauth2-proxy, rekor-fips, juicefs,...
CVE-2024-21536 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, argo-workflows, kubeflow-pipelines...