Skip to content
OpenAdvisories

Package · Go

github.com/argoproj/argo-events

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Critical 10.0
    CVE-2025-32445

    Users can gain privileged access to the host system and cluster with EventSource and Sensor CR

    Argo Events is an event-driven workflow automation framework for Kubernetes. A user with permission to create/modify EventSource and Sensor custom resources can gain privileged access to the host system and cluster, even without having direct administrative p…

    argoproj argo-events github.com/argoproj/argo-events Go
  • High 7.5
    CVE-2022-25856

    Directory Traversal

    The package github.com/argoproj/argo-events/sensors/artifacts before 1.7.1 are vulnerable to Directory Traversal in the (g *GitArtifactReader).Read() API in git.go. This could allow arbitrary file reads if the GitArtifactReader is provided a pathname containi…

    github.com/argoproj/argo-events Go
  • High 7.5
    CVE-2022-31054

    Uses of deprecated API can be used to cause DoS in user-facing endpoints in Argo Events

    Argo Events is an event-driven workflow automation framework for Kubernetes. Prior to version 1.7.1, several `HandleRoute` endpoints make use of the deprecated `ioutil.ReadAll()`. `ioutil.ReadAll()` reads all the data into memory. As such, an attacker who sen…

    argoproj argo-events github.com/argoproj/argo-events Go