argo-workflows vulnerabilities (Bitnami)
18 vulnerabilities.
-
argo-workflowsBitnami Argo Workflows 4.1.0 through 4.1.3 Cross-Namespace Disclosure via Negated Selector 8.3 High -
argo-workflowsBitnami Argo Workflows: Incomplete fix for CVE-2026-31892: ArtifactGC.PodSpecPatch bypass of Strict/Secure templateReferencing 8.9 High -
argo-workflowsBitnami Argo Workflows: Exposure of artifact repository credentials 8.5 High -
argo-workflowsBitnami Argo Workflows has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure 8.1 High -
argo-workflowsBitnami Argo Workflows: Unauthenticated Memory Exhaustion (DoS) in Webhook Interceptor 8.2 High -
argo-workflowsBitnami Argo Workflows: SSO RBAC Delegation Nil Pointer Dereference DoS (gatekeeper.go) 2.3 Low -
argo-workflowsBitnami Argo Workflows Is Missing Authorization in Sync ConfigMap Provider 8.5 High -
argo-workflowsBitnami Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows controller 7.7 High -
argo-workflowsBitnami WorkflowTemplate Security Bypass via podSpecPatch in Strict/Secure Reference Mode 8.9 High -
argo-workflowsBitnami Argo Workflows has unauthorized access to Argo Workflows Template 9.8 Critical -
argo-workflowsBitnami Argo Workflows affected by stored XSS in the artifact directory listing 7.3 High -
argo-workflowsBitnami argoproj/argo-workflows is vulnerable to RCE via ZipSlip and symbolic links 8.1 High -
argo-workflowsBitnami Argo Workflows exposes artifact repository credentials in workflow-controller logs 8.5 High -
argo-workflowsBitnami argo-workflows Zip Slip path traversal allows arbitrary file write and container configuration overwrite 8.1 High -
argo-workflowsBitnami Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode 6.3 Medium -
argo-workflowsBitnami Argo Workflows Controller: Denial of Service via malicious daemon Workflows 5.7 Medium -
argo-workflowsBitnami Privilege Escalation in argo-workflows 7.1 High -
argo-workflowsBitnami Workflow re-write vulnerability using input parameter 6.5 Medium