Go/github.com/argoproj/argo-events CVE-2025-32445: critical 9.9, EPSS 0.79%
Argo Events users can gain privileged access to the host system and cluster with EventSource and Sensor CR in github.com/argoproj/argo-events
Action: Upgrade github.com/argoproj/argo-events to 1.9.6 or later.
go get github.com/argoproj/argo-events@v1.9.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.9.6 | - |
Fixed versions
| 1.9.6 |
Sources
- osv: GO-2025-3608
- nvd: CVE-2025-32445
- https://github.com/argoproj/argo-events/security/advisories/GHSA-hmp7-x699-cvhq
- https://github.com/argoproj/argo-events/commit/18412293a699f559848b00e6e459c9ce2de0d3e2
- https://github.com/argoproj/argo-events/pull/3528
CVE-2025-32445 · published · modified · JSON