CVE-2026-62185

Argo CD Helm Chart before 10.0.0 fails to install network policies by default, allowing any pod on a cluster to access repo-server and other Argo APIs. Attackers can exploit this unrestricted network access through combined attacks to achieve cluster compromise and remote code execution...

CVE-2026-62185 Argo CD Helm Chart < 10.0.0 Missing Network Policy RCE

Argo CD Helm Chart before 10.0.0 fails to install network policies by default, allowing any pod on a cluster to access repo-server and other Argo APIs. Attackers can exploit this unrestricted network access through combined attacks to achieve cluster compromise and remote code execution...

CLEANSTART-2026-KL41807 Security fixes for CVE-2025-47912, CVE-2025-55190, CVE-2025-55191, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-59537, CVE-2025-59538, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2026-24051, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27142, CVE-2026-27145, CVE-2026-29181, CVE-2026-33186, CVE-2026-33762, CVE-2026-34165, CVE-2026-34986, CVE-2026-35469, CVE-2026-39821, CVE-2026-39883, CVE-2026-41506, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, CVE-2026-42880, CVE-2026-44740, CVE-2026-44973, CVE-2026-45022, CVE-2026-45570, CVE-2026-45571, CVE-2026-45737, CVE-2026-45738, ghsa-2v5j-vhc3-9cwm, ghsa-2vgg-9h3w-qbr4, ghsa-2xsj-vh29-9cwm, ghsa-37cx-329c-33x3, ghsa-389r-gv7p-r3rp, ghsa-3v3m-wc6v-x4x3, ghsa-3wgm-2mw2-vh5m, ghsa-3xc5-wrhm-f963, ghsa-4x4m-3c2p-qppc, ghsa-6v2p-p543-phr9, ghsa-78h2-9frx-2jm8, ghsa-92cp-5422-2m47, ghsa-93mq-9ffx-83m2, ghsa-crhj-59gh-8x96, ghsa-f6x5-jh6r-wrfv, ghsa-gm2x-2g9h-ccm8, ghsa-gxhx-2686-5h9g, ghsa-h98r-wv3h-fr38, ghsa-hfvc-g4fc-pqhx, ghsa-hj2p-8wj8-pfq4, ghsa-j5w8-q4qc-rx2x, ghsa-jhf3-xxhw-2wpp, ghsa-m3xc-h892-ggx6, ghsa-m7cr-m3pv-hgrp, ghsa-mh2q-q3fh-2475, ghsa-mh63-6h87-95cp, ghsa-mw99-9chc-xw7r, ghsa-pc3f-x583-g7j2, ghsa-qw64-3x98-g7q2, ghsa-rg3g-4rw9-gqrp applied in versions: 2.13.9-r0, 2.14.20-r0, 3.0.16-r0, 3.0.19-r0, 3.1.4-r0, 3.1.8.-r0, 3.1.9-r4, 3.2.7-r0, 3.2.7-r1, 3.2.7-r2, 3.2.7-r3, 3.2.7-r4

Multiple security vulnerabilities affect the argo-cd package. These issues are resolved in later releases. See references for individual vulnerability details...

PT-2026-57887

Name of the Vulnerable Software and Affected Versions Argo CD Helm Chart versions prior to 10.0.0 Description The software fails to install network policies by default, which allows any pod within the cluster to access the repo-server and other Argo APIs. This unrestricted network access can be...

OPENSUSE-SU-2026:21282-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issue - CVE-2026-13606: crafted Photo CD PCD file can cause memory corruption bsc1269891...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: podman-fips, pulumi-language-yaml, grafana-operator-fips, prometheus-operator-fips, cerbos, vault-secrets-operator, nemo, backup-restore-operator, prometheus-operator, authentik, flux-fips, ocm-kubernetes-controller-fips, vault-fips, buildkitd, gitlab-rails-ce,...

SUSE-SU-2026:2820-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issue - CVE-2026-13606: crafted Photo CD PCD file can cause memory corruption bsc1269891...

The vulnerability of the decoder for Photo CD (PCD) in the console-based graphic editor ImageMagick allows a hacker to gain unauthorized access to protected information or cause service failures.

The vulnerability of the decoder for Photo CD PCD format in the console-based graphic editor ImageMagick involves reading data outside of the permitted range in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause service...

GHSA-R56H-J38W-HRQQ vulnerabilities

Vulnerabilities for packages: rke2-runtime-fips, azurefile-csi-fips, longhorn-manager, argo-cd-fips, cluster-autoscaler-fips, harvester, harvester-fips, kubernetes-csi-driver-hostpath, longhorn-manager-fips, azuredisk-csi, longhorn-share-manager, longhorn-share-manager-fips, eks-distro,...

PT-2026-57021

Name of the Vulnerable Software and Affected Versions GraphicsMagick affected versions not specified Description Processing a specially crafted Photo CD PCD file can lead to memory corruption, a condition where the software incorrectly writes data to memory locations, potentially causing crashes ...

CVE-2026-13606

A flaw was found in GraphicsMagick's Photo CD PCD decoder. A remote attacker could exploit this vulnerability by providing a specially crafted PCD file. This could lead to an out-of-bounds write, corrupting memory and potentially causing a denial of service or other unpredictable system behavior...

GHSA-5CGQ-3RG8-M6CV vulnerabilities

Vulnerabilities for packages: k3s, external-secrets-operator, harbor-fips, knative-kafka-broker, nemo, mattermost, flux, kubernetes, keda-fips, backup-restore-operator, vault, argocd-image-updater, argo-workflows, upwind-agent, prometheus, telegraf, grafana, argo-cd, argo-cd-fips, vault-fips,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: knative-kafka-broker, kubevela-fips, nemo, backup-restore-operator, prometheus-operator, vault, chisel, flux-fips, upwind-agent, trivy-fips, vault-fips, gitlab-rails-ce, commercial-grafana, kubernetes-dashboard, gitea-fips, rancher, argocd-image-updater-fips, zitadel...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: podman-fips, pulumi-language-yaml, chezmoi, prometheus-podman-exporter, knative-kafka-broker, kubevela-fips, nemo, backup-restore-operator, prometheus-operator, vault, flux-fips, step, upwind-agent, trivy-fips, vault-fips, gitlab-rails-ce, grype-fips,...

GHSA-5CGQ-3RG8-M6CV vulnerabilities

Vulnerabilities for packages: istio, argocd-image-updater, telegraf, argo-events, gitsign, external-secrets-operator, mattermost, prometheus, k3s, containerd, terragrunt, guac...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, minio, gitlab-kas, step-issuer, flux-image-automation-controller, sops, terraform-provider-azurerm, argo-events, external-dns, argo-cd, opentelemetry-collector, crossplane-provider-azure-authorization, guac, fscrypt, ko, gatus, melange,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: aactl, cert-manager, minio, telegraf, gitlab-kas, flux-image-automation-controller, prometheus-operator, kyverno, kubernetes, cilium, trivy-operator, nerdctl, argocd-image-updater, skaffold, rancher, snyk-cli, external-dns, kots, opentelemetry-collector, helm,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, minio, gitlab-kas, flux-image-automation-controller, argo-events, external-dns, argo-cd, opentelemetry-collector, guac, fscrypt, gatus, melange, spire-server, dagger, datadog-agent, scorecard, docker-machine-driver-harvester,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: aactl, cert-manager, minio, telegraf, gitlab-kas, flux-image-automation-controller, prometheus-operator, kyverno, kubernetes, cilium, trivy-operator, nerdctl, argocd-image-updater, skaffold, rancher, snyk-cli, external-dns, kots, opentelemetry-collector, helm,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, minio, gitlab-kas, step-issuer, flux-image-automation-controller, sops, terraform-provider-azurerm, argo-events, external-dns, argo-cd, opentelemetry-collector, crossplane-provider-azure-authorization, guac, fscrypt, ko, gatus, melange,...