logo

Database

Race condition In github.com/argoproj/argo-workflows

Description

Argo Workflows Controller: Denial of Service via malicious daemon Workflows in github.com/argoproj/argo-workflows Argo Workflows Controller: Denial of Service via malicious daemon Workflows in github.com/argoproj/argo-workflows

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2024-478272. NVD-2024-478273. OSV-GO-2024-32264. OSV-2024-478275. GHSA-ghjw-32xw-ffwr6. GCVE-2024-478277. GHSA-ghjw-32xw-ffwr

References

1. https://github.com/argoproj/argo-workflows/commit/524406451f4dfa57bf3371fb85becdb56a2b309a2. https://github.com/argoproj/argo-workflows/pull/136413. https://github.com/argoproj/argo-workflows/blob/ce7f9bfb9b45f009b3e85fabe5e6410de23c7c5f/workflow/metrics/metrics_k8s_request.go#L754. https://github.com/argoproj/argo-workflows/security/advisories/GHSA-ghjw-32xw-ffwr

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.