github.com/argoproj/argo-workflows vulnerabilities (Go)
19 vulnerabilities.
-
github.com/argoproj/argo-workflowsGo Argo Workflows: Incomplete fix for CVE-2026-31892: ArtifactGC.PodSpecPatch bypass of Strict/Secure templateReferencing 8.9 High -
github.com/argoproj/argo-workflowsGo Argo Workflows: Exposure of artifact repository credentials 8.5 High -
github.com/argoproj/argo-workflowsGo Argo Workflows has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure 8.1 High -
github.com/argoproj/argo-workflowsGo Argo Workflows: Unauthenticated Memory Exhaustion (DoS) in Webhook Interceptor 8.2 High -
github.com/argoproj/argo-workflowsGo Argo Workflows: SSO RBAC Delegation Nil Pointer Dereference DoS (gatekeeper.go) 2.3 Low -
github.com/argoproj/argo-workflowsGo Argo Workflows Is Missing Authorization in Sync ConfigMap Provider 8.5 High -
github.com/argoproj/argo-workflowsGo Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows controller 7.7 High -
github.com/argoproj/argo-workflowsGo WorkflowTemplate Security Bypass via podSpecPatch in Strict/Secure Reference Mode 8.9 High -
github.com/argoproj/argo-workflowsGo Argo Workflows has unauthorized access to Argo Workflows Template 9.8 Critical -
github.com/argoproj/argo-workflowsGo Argo Workflows affected by stored XSS in the artifact directory listing 7.3 High -
github.com/argoproj/argo-workflowsGo argoproj/argo-workflows is vulnerable to RCE via ZipSlip and symbolic links 8.1 High -
github.com/argoproj/argo-workflowsGo Argo Workflows exposes artifact repository credentials in workflow-controller logs 8.5 High -
github.com/argoproj/argo-workflowsGo argo-workflows Zip Slip path traversal allows arbitrary file write and container configuration overwrite 8.1 High -
github.com/argoproj/argo-workflowsGo Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode 6.3 Medium -
github.com/argoproj/argo-workflowsGo Argo Workflows Controller: Denial of Service via malicious daemon Workflows 5.7 Medium -
github.com/argoproj/argo-workflowsGo Potential privilege escalation on Kubernetes >= v1.19 when the Argo Sever is run with `--auth-mode=client` No score -
github.com/argoproj/argo-workflowsGo Argo Server TLS requests could be forged by attacker with network access No score -
github.com/argoproj/argo-workflowsGo Workflow re-write vulnerability using input parameter 6.5 Medium -
github.com/argoproj/argo-workflowsGo Attack on Kubernetes via Misconfigured Argo Workflows No score