Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via httprequester.go and httpdownloader.go‎. An attacker can access internal network resources and exfiltrate sensitive data by crafting malicious promotion templates or Promotion resources that trigger...

CVE-2025-68156 vulnerabilities

Vulnerabilities for packages: argo-cd, datadog-agent, opentelemetry-collector-contrib, kserve, kubeflow-pipelines, tempo, kargo, amazon-cloudwatch-agent, argo-rollouts, argo-workflows, grafana-alloy, vale, splunk-otel-collector, k8sgateway, nats, k8sgpt, kine, jaeger, coredns, aws-otel-collector,...

GHSA-CFPF-HRX2-8RV6 vulnerabilities

Vulnerabilities for packages: argo-cd, datadog-agent, opentelemetry-collector-contrib, kserve, kubeflow-pipelines, tempo, kargo, amazon-cloudwatch-agent, argo-rollouts, argo-workflows, grafana-alloy, vale, splunk-otel-collector, k8sgateway, nats, k8sgpt, kine, jaeger, coredns, aws-otel-collector,...

GHSA-CFPF-HRX2-8RV6 vulnerabilities

Vulnerabilities for packages: datadog-agent-fips, elastic-agent, grafana-alloy-fips, vale, nats, splunk-otel-collector-fips, k8sgateway, datadog-agent, grafana-alloy, coredns, jaeger-fips, nrdot-collector-k8s-fips, elastic-agent-fips, opentelemetry-collector, argo-rollouts, argo-cd-fips,...