PraisonAI - Authentication Bypass

PraisonAI 2.5.6 to 4.6.34 contains a broken authentication caused by disabled default authentication in legacy Flask API server, letting remote attackers access /agents and trigger workflows without token, exploit requires network access to API server. id: CVE-2026-44338 info: name: PraisonAI -...

GHSA-76P8-FHRM-VPC7 vulnerabilities

Vulnerabilities for packages: wave, cloud-provider-azure, harbor, net-kourier, rancher-helm, crossplane-provider-aws-eks, gitlab-runner, dataplaneapi, k9s, cass-operator, cloudprober, mesosphere-vsphere-csi, vault-secrets-webhook, kubescape, argocd-image-updater, opa, mattermost,...

GO-2026-5527 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, kubeflow-pipelines, argo-workflows, kubeflow-pipelines-fips, kubeflow-pipelines-driver-fips...

GO-2026-5148 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, kubeflow-pipelines, argo-workflows, kubeflow-pipelines-fips, kubeflow-pipelines-driver-fips...

GO-2026-4678 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, argo-workflows, kubeflow-pipelines...

GO-2024-3303 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, argo-workflows...

GO-2025-4223 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, argo-workflows, kubeflow-pipelines...

GO-2026-4350 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, argo-workflows, kubeflow-pipelines...

GO-2025-4024 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, argo-workflows, kubeflow-pipelines...

GO-2024-2962 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, newrelic-fluent-bit-output, argo-workflows...

GO-2025-4023 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, argo-workflows, kubeflow-pipelines...

GO-2026-5751 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, kubeflow-pipelines, argo-workflows, kubeflow-pipelines-fips, kubeflow-pipelines-driver-fips...

GO-2026-5235 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, kubeflow-pipelines, argo-workflows, kubeflow-pipelines-fips, kubeflow-pipelines-driver-fips...

GO-2024-2605 vulnerabilities

Vulnerabilities for packages: trillian, step-ca, trillian-fips, argo-workflows-fips, wavefront-collector-for-kubernetes, caddy, argo-workflows, kots, step, caddy-fips...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: kots, bom, pulumi-language-dotnet, melange, pulumi, k9s, guac, argo-workflows, chezmoi, k8sgpt, pulumi-language-yaml, gptscript, kubescape, nuclei, argocd-image-updater, timoni, crossplane, flux-image-automation-controller, gitsign, go-licenses,...

GO-2024-3303 vulnerabilities

Vulnerabilities for packages: argo-workflows...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: kots, bom, pulumi-language-dotnet, melange, pulumi, k9s, guac, argo-workflows, chezmoi, k8sgpt, pulumi-language-yaml, gptscript, kubescape, nuclei, argocd-image-updater, timoni, crossplane, flux-image-automation-controller, gitsign, go-licenses,...

GO-2026-5148 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows...

GO-2025-4223 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows...

GO-2025-4024 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows...