https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 19:59:11 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-234049 EUVD-2026-234049 https://cve.radiocsirt.org/vuln/euvd-2026-234049 https://cve.radiocsirt.org/vuln/fkie_cve-2022-31054 <p>Argo Events is an event-driven workflow automation framework for Kubernetes. Prior to version 1.7.1, several `HandleRoute` endpoints make use of the deprecated `ioutil.ReadAll()`. `ioutil.ReadAll()` reads all the data into memory. As such, an attacker who sends a large request to the Argo Events server will be able to crash it and cause denial of service. A patch for this vulnerability has been released in Argo Events version 1.7.1.</p> <p>Argo Events is an event-driven workflow automation framework for Kubernetes. Prior to version 1.7.1, several `HandleRoute` endpoints make use of the deprecated `ioutil.ReadAll()`. `ioutil.ReadAll()` reads all the data into memory. As such, an attacker who sends a large request to the Argo Events server will be able to crash it and cause denial of service. A patch for this vulnerability has been released in Argo Events version 1.7.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-31054 https://cve.radiocsirt.org/vuln/ghsa-5q86-62xr-3r57 <p><strong>Affected:</strong> Go: github.com/argoproj/argo-events</p> <p>### Impact Several `HandleRoute` endpoints make use of the deprecated `ioutil.ReadAll()`. `ioutil.ReadAll()` reads all the data into memory. As such, an attacker who sends a large request to the Argo Events server will be able to crash it and cause denial of service.</p> <p>Eventsources susceptible to an out-of-memory denial-of-service attack:</p> <p>- AWS SNS - Bitbucket - Bitbucket - Gitlab - Slack - Storagegrid - Webhook</p> <p>### Patches A patch for this vulnerability has been released in the following Argo Events version:</p> <p>v1.7.1</p> <p>### Credits Disclosed by [Ada Logics](https://adalogics.com/) in a security audit sponsored by CNCF and facilitated by OSTIF.</p> <p>### For more information Open an issue in the [Argo Events issue tracker](https://github.com/argoproj/argo-events/issues) or [discussions](https://github.com/argoproj/argo-events/discussions) Join us on [Slack](https://argoproj.github.io/community/join-slack) in channel #argo-events</p> <p><strong>Affected:</strong> Go: github.com/argoproj/argo-events</p> <p>### Impact Several `HandleRoute` endpoints make use of the deprecated `ioutil.ReadAll()`. `ioutil.ReadAll()` reads all the data into memory. As such, an attacker who sends a large request to the Argo Events server will be able to crash it and cause denial of service.</p> <p>Eventsources susceptible to an out-of-memory denial-of-service attack:</p> <p>- AWS SNS - Bitbucket - Bitbucket - Gitlab - Slack - Storagegrid - Webhook</p> <p>### Patches A patch for this vulnerability has been released in the following Argo Events version:</p> <p>v1.7.1</p> <p>### Credits Disclosed by [Ada Logics](https://adalogics.com/) in a security audit sponsored by CNCF and facilitated by OSTIF.</p> <p>### For more information Open an issue in the [Argo Events issue tracker](https://github.com/argoproj/argo-events/issues) or [discussions](https://github.com/argoproj/argo-events/discussions) Join us on [Slack](https://argoproj.github.io/community/join-slack) in channel #argo-events</p> https://cve.radiocsirt.org/vuln/ghsa-5q86-62xr-3r57 https://cve.radiocsirt.org/vuln/gsd-2022-31054 gsd-2022-31054 https://cve.radiocsirt.org/vuln/gsd-2022-31054