CVE-2024-21536 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, kubeflow-pipelines, argo-workflows...

GHSA-WR3J-PWJ9-HQQ6 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-workflows...

GHSA-C7QV-Q95Q-8V27 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, kubeflow-pipelines, argo-workflows...

GHSA-WR3J-PWJ9-HQQ6 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-workflows...

GHSA-CWPG-QGC6-JXVQ vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, kubeflow-katib, argo-workflows...

CVE-2024-29180 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-workflows...

CVE-2024-21536 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-workflows, kubeflow-pipelines...

GHSA-C7QV-Q95Q-8V27 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-workflows, kubeflow-pipelines...

CVE-2023-24531 vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, kubeflow-katib, argo-workflows...

CVE-2024-9096 Improper Authorization in lunary-ai/lunary

In lunary-ai/lunary version 1.4.28, the /checklists/:id route allows low-privilege users to modify checklists by sending a PATCH request. The route lacks proper access control, such as middleware to ensure that only authorized users e.g., project owners or admins can modify checklist data. This...

GHSA-93MQ-9FFX-83M2 vulnerabilities

Vulnerabilities for packages: k8sgpt, opentelemetry-collector, grafana-alloy, kargo, nats, kubeflow-pipelines, opentelemetry-collector-contrib, tempo, argo-rollouts, splunk-otel-collector, amazon-cloudwatch-agent, argo-workflows...

CVE-2025-29786 vulnerabilities

Vulnerabilities for packages: k8sgpt, opentelemetry-collector, grafana-alloy, kargo, nats, kubeflow-pipelines, opentelemetry-collector-contrib, tempo, argo-rollouts, splunk-otel-collector, amazon-cloudwatch-agent, argo-workflows...

GHSA-93MQ-9FFX-83M2 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector-fips, tempo-fips, argo-cd-fips, keda, argo-cd, grafana-alloy, splunk-otel-collector, argo-rollouts, tempo, k8sgpt, argo-rollouts-fips, kubeflow-pipelines, grafana-alloy-fips, opentelemetry-collector-contrib-fips, argo-workflows, eks-distro-fips,...

From Vulnerability Scanning to Risk Management: The Complete VMDR Advantage

What if your vulnerability management tool did more than just scan and instead helped you take control of cyber risks across your business? CISA defines “vulnerability management” as the process by which organizations identify, analyze, and manage vulnerabilities in a critical service’s operating...

GHSA-67MH-4WV8-2F99 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, vite, argo-workflows...

GHSA-67MH-4WV8-2F99 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, argo-workflows, gitlab-rails-ce, vite, kubeflow-katib...

CVE-2022-29164

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. In affected versions an attacker can create a workflow which produces a HTML artifact containing an HTML file that contains a script which uses XHR calls to interact with the Argo Serv...

CVE-2022-39395

Vela is a Pipeline Automation CI/CD framework built on Linux container technology written in Golang. In Vela Server and Vela Worker prior to version 0.16.0 and Vela UI prior to version 0.17.0, some default configurations for Vela allow exploitation and container breakouts. Users should upgrade to...

CVE-2022-39326

kartverket/github-workflows are shared reusable workflows for GitHub Actions. Prior to version 2.7.5, all users of the run-terraform reusable workflow from the kartverket/github-workflows repo are affected by a code injection vulnerability. A malicious actor could potentially send a PR with a...

CVE-2024-27920

projectdiscovery/nuclei is a fast and customisable vulnerability scanner based on simple YAML based DSL. A significant security oversight was identified in Nuclei v3, involving the execution of unsigned code templates through workflows. This vulnerability specifically affects users utilizing cust...