Argo Events Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Argo Events Project records in CISA KEV

No Argo Events Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Argo Events 2 records MEDIUM

Records

2 records

TI-2022-13099 CVE-2022-31054 · GHSA-5q86-62xr-3r57

Uses of deprecated API can be used to cause DoS in user-facing endpoints in Argo Events

MEDIUM 42

Argo Events is an event-driven workflow automation framework for Kubernetes.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01633 Published 2022-06-13 Fixed in 1.7.1 CWE-400

TI-2022-09422 CVE-2022-25856 · GHSA-qpgx-64h2-gc3c

Directory traversal in github.com/argoproj/argo-events/sensors/artifacts

LOW 37

The package github.com/argoproj/argo-events/sensors/artifacts before 1.7.1 are vulnerable to Directory Traversal in the (g *GitArtifactReader).Read() API in git.go.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01939 Published 2022-06-17 Fixed in 1.7.1 CWE-22

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0