Product · argoproj

argo-workflows

17 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 6.3

CVE-2024-53862

Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. When using `--auth-mode=client`, Archived Workflows can be retrieved with a fake or spoofed token via the GET Workflow endpoint: `/api/v1/workflow…

argoproj argo-workflows argo-workflows github.com/argoproj/argo-workflows/v3 Wolfi Go

Dec 2, 2024
Medium 5.7

CVE-2024-47827

Argo Workflows Controller: Denial of Service via malicious daemon Workflows

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Due to a race condition in a global variable in 3.6.0-rc1, the argo workflows controller can be made to crash on-command by any user with access t…

argoproj argo-workflows github.com/argoproj/argo-workflows github.com/argoproj/argo-workflows/v3 Go

Oct 28, 2024