Skip to content
OpenAdvisories

Package · Go

github.com/argoproj/argo-events

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2022-25856

    Directory Traversal

    The package github.com/argoproj/argo-events/sensors/artifacts before 1.7.1 are vulnerable to Directory Traversal in the (g *GitArtifactReader).Read() API in git.go. This could allow arbitrary file reads if the GitArtifactReader is provided a pathname containi…

    github.com/argoproj/argo-events Go
  • High 7.5
    CVE-2022-31054

    Uses of deprecated API can be used to cause DoS in user-facing endpoints in Argo Events

    Argo Events is an event-driven workflow automation framework for Kubernetes. Prior to version 1.7.1, several `HandleRoute` endpoints make use of the deprecated `ioutil.ReadAll()`. `ioutil.ReadAll()` reads all the data into memory. As such, an attacker who sen…

    argoproj argo-events github.com/argoproj/argo-events Go