Skip to content
OpenAdvisories

Package · Wolfi

argo-workflow-controller-4.0

50 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.3
    CVE-2026-41889

    pgx: SQL Injection via placeholder confusion with dollar quoted string literals

    pgx is a PostgreSQL driver and toolkit for Go. Prior to version 5.9.2, SQL injection can occur when the non-default simple protocol is used, a dollar quoted string literal is used in the SQL query, that string literal contains text that would be would be inte…

    jackc pgx kots k3s Debian Ubuntu Azure Linux Wolfi Go
  • Low 1.7
    CVE-2026-26958

    filippo.io/edwards25519 MultiScalarMult function produces invalid results or undefined behavior if receiver is not the identity

    filippo.io/edwards25519 is a Go library implementing the edwards25519 elliptic curve with APIs for building cryptographic primitives. In versions 1.1.0 and earlier, MultiScalarMult produces invalid results or undefined behavior if the receiver is not the iden…

    FiloSottile filippo.io/edwards25519 kots aactl Debian Ubuntu Azure Linux Wolfi Go