Skip to content
OpenAdvisories

Package · Wolfi

argo-workflows-ui-4.0

65 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-71557 Public exploit

    go-git: Malicious reference names may modify files outside the reference storage

    go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, reference names are not sanitized before being used to construct on-disk paths under the reference storage directory, so a maliciously crafted reference …

    go-git go-git zot kubescape Debian Ubuntu Azure Linux Wolfi Go
  • Medium 4.7
    CVE-2026-14620 Public exploit

    webpack-dev-server vulnerable to cross-site request forgery via internal developer endpoints

    webpack-dev-server versions 5.2.5 and earlier expose two internal developer endpoints, /webpack-dev-server/open-editor and /webpack-dev-server/invalidate, that perform state-changing actions on any GET request without verifying that the request originated fro…

    webpack-dev-server webpack-dev-server argo-workflows-ui-4.0 webpack-dev-server Wolfi npm
  • Medium 4.3
    CVE-2026-33532 Public exploit

    yaml is vulnerable to Stack Overflow via deeply nested YAML collections

    `yaml` is a YAML parser and serialiser for JavaScript. Parsing a YAML document with a version of `yaml` on the 1.x branch prior to 1.10.3 or on the 2.x branch prior to 2.8.3 may throw a RangeError due to a stack overflow. The node resolution/composition phase…

    eemeli yaml langfuse-3-worker katib-suggestion-hyperopt Debian Ubuntu Wolfi npm