Approved changes feed: RSS · Atom

cpe:2.3:a:argoproj:argo-workflows:3.6.0-rc1:*:*:*:*:*:*:*

part: a version: 3.6.0-rc1 update: *

VendorArgoproj (b84a6b2f-3264-516e-b963-717ce37bd8b9)
ProductArgo Workflows (3282f531-035a-5cf9-8639-74145d7bb393)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-47827 vulnerable 2026-06-08 06:48:13.322353 Argo Workflows Controller: Denial of Service via malicious daemon Workflows
MEDIUM (5.7)
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Due to a race condition in a global variable in 3.6.0-rc1, the argo workflows controller can be made to crash on-command by any user with access to execute a workflow. This vulnerability is fixed in 3.6.0-rc2.
Published: 2024-10-28T15:10:55.772Z
Updated: 2025-04-04T20:43:57.325Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.