GHSA-93MQ-9FFX-83M2 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, opentelemetry-collector, argo-workflows, kargo, kubeflow-pipelines, grafana-alloy, argo-rollouts, splunk-otel-collector, nats, amazon-cloudwatch-agent, tempo, k8sgpt...

CVE-2025-29786 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, opentelemetry-collector, argo-workflows, kargo, kubeflow-pipelines, grafana-alloy, argo-rollouts, splunk-otel-collector, nats, amazon-cloudwatch-agent, tempo, k8sgpt...

CVE-2025-29786 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, kargo, k8sgpt, eks-distro, opentelemetry-collector-contrib, eks-distro-fips, nats, grafana-alloy, opentelemetry-collector-contrib-fips, splunk-otel-collector, tempo, amazon-cloudwatch-agent-fips, argo-rollouts-fips, argo-cd,...

GHSA-93MQ-9FFX-83M2 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, kargo, k8sgpt, eks-distro, opentelemetry-collector-contrib, eks-distro-fips, nats, grafana-alloy, opentelemetry-collector-contrib-fips, splunk-otel-collector, tempo, amazon-cloudwatch-agent-fips, argo-rollouts-fips, argo-cd,...

GHSA-QXP5-GWG8-XV66 vulnerabilities

Vulnerabilities for packages: containerd-fips, node-problem-detector-fips, openbao-k8s, glow, prometheus-blackbox-exporter-fips, etcd-fips, longhorn-share-manager, snyk-cli, kargo, jitsucom-bulker, cue-fips, victoriametrics-cluster-fips, scorecard, dex-k8s-authenticator,...

argo-santorini.com Cross Site Scripting vulnerability OBB-4034449

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Important: Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.15.1 security update

An update is now available for Red Hat OpenShift GitOps v1.15.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

GHSA-3F6R-QH9C-X6MM vulnerabilities

Vulnerabilities for packages: nri-prometheus, govulncheck, kafkaexporter, trino, nats, nri-f5, bank-vaults, flux-image-automation-controller, argo-workflows, minify, bom, ytt, speedtest-go, dex, fluent-operator, hcloud, gke-gcloud-auth-plugin, argo-events, vt-cli, mockgen, nri-jmx,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: nri-prometheus, src-fingerprint, govulncheck, wire-go, kubevela, wazero, gobuster, kubewatch, eksctl, gomplate, helm-push, aws-flb-kinesis, helm, nats, kor, kustomize, nri-f5, litefs, terraform-docs, dockerize, kubernetes-dashboard-metrics-scraper, supercronic, dive,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: nri-prometheus, govulncheck, kafkaexporter, trino, nats, nri-f5, bank-vaults, flux-image-automation-controller, argo-workflows, minify, bom, ytt, speedtest-go, dex, fluent-operator, hcloud, gke-gcloud-auth-plugin, argo-events, vt-cli, mockgen, nri-jmx,...

CVE-2025-27144 vulnerabilities

Vulnerabilities for packages: oauth2-proxy, step-ca, gomplate, gatus, boring-registry, cert-manager-istio-csr, zarf, k3s, fulcio, zot, dagger, caddy, containerd, bank-vaults, temporal-ui-server, argo-workflows, grafana-alloy, sigstore-scaffolding, argocd-image-updater, step, goreleaser, steampipe...

CVE-2025-27144 vulnerabilities

Vulnerabilities for packages: containerd-fips, flux-kustomize-controller, kargo, kyverno-notation-aws, rancher-agent, boring-registry-fips, timestamp-authority, grafana-alloy, rabbitmq-messaging-topology-operator, spire-server, oauth2-proxy, vault, consul-k8s, opentofu-fips, zot, falcoctl-fips,...

GHSA-C6GW-W398-HV78 vulnerabilities

Vulnerabilities for packages: oauth2-proxy, step-ca, gomplate, gatus, boring-registry, cert-manager-istio-csr, zarf, k3s, fulcio, zot, dagger, caddy, containerd, bank-vaults, temporal-ui-server, argo-workflows, grafana-alloy, sigstore-scaffolding, argocd-image-updater, step, goreleaser, steampipe...

GHSA-JGFP-53C3-624W vulnerabilities

Vulnerabilities for packages: kapp, node-feature-discovery, calico, rancher-agent, rancher-fleet, aws-ebs-csi-driver, kubernetes-dns-node-cache-fips, cluster-autoscaler, yunikorn-k8shim, argocd-image-updater-fips, cluster-autoscaler-fips, emissary, aws-efs-csi-driver, kubernetes,...

CVE-2025-0426 vulnerabilities

Vulnerabilities for packages: kapp, node-feature-discovery, calico, rancher-agent, rancher-fleet, aws-ebs-csi-driver, kubernetes-dns-node-cache-fips, cluster-autoscaler, yunikorn-k8shim, argocd-image-updater-fips, cluster-autoscaler-fips, emissary, aws-efs-csi-driver, kubernetes,...

GHSA-67MH-4WV8-2F99 vulnerabilities

Vulnerabilities for packages: vite, argo-workflows, kubeflow-katib...

GHSA-67MH-4WV8-2F99 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, gitlab-rails-ce, argo-workflows, gitlab-rails-ce-fips, vite...

SUSE CVE-2025-23216

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. A vulnerability was discovered in Argo CD that exposed secret values in error messages and the diff view when an invalid Kubernetes Secret resource was synced from a repository. The vulnerability assumes the user has write...

CVE-2022-29164

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. In affected versions an attacker can create a workflow which produces a HTML artifact containing an HTML file that contains a script which uses XHR calls to interact with the Argo Serv...

CVE-2022-24768

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All unpatched versions of Argo CD starting with 1.0.0 are vulnerable to an improper access control bug, allowing a malicious user to potentially escalate their privileges to admin-level. Versions starting with 0.8.0 and 0.5...