Users can gain privileged access to the host system and cluster with EventSource and Sensor CR

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2025-32445 · CVE overview and exploitation status

EUVD-2025-10986

GHSA-hmp7-x699-cvhq

GO-2025-3608

cve-program · CVE-2025-32445

• https://github.com/argoproj/argo-events/security/advisories/GHSA-hmp7-x699-cvhq
• https://github.com/argoproj/argo-events/commit/18412293a699f559848b00e6e459c9ce2de0d3e2

euvd · EUVD-2025-10986

• https://github.com/argoproj/argo-events/security/advisories/GHSA-hmp7-x699-cvhq
• https://github.com/argoproj/argo-events/commit/18412293a699f559848b00e6e459c9ce2de0d3e2

nvd · CVE-2025-32445

• https://github.com/argoproj/argo-events/commit/18412293a699f559848b00e6e459c9ce2de0d3e2
• https://github.com/argoproj/argo-events/security/advisories/GHSA-hmp7-x699-cvhq

osv · GHSA-hmp7-x699-cvhq

• https://github.com/argoproj/argo-events/security/advisories/GHSA-hmp7-x699-cvhq
• https://nvd.nist.gov/vuln/detail/CVE-2025-32445
• https://github.com/argoproj/argo-events/pull/3528
• https://github.com/argoproj/argo-events/commit/18412293a699f559848b00e6e459c9ce2de0d3e2
• https://github.com/argoproj/argo-events
• https://pkg.go.dev/vuln/GO-2025-3608

osv · GO-2025-3608

• https://github.com/argoproj/argo-events/security/advisories/GHSA-hmp7-x699-cvhq
• https://nvd.nist.gov/vuln/detail/CVE-2025-32445
• https://github.com/argoproj/argo-events/commit/18412293a699f559848b00e6e459c9ce2de0d3e2
• https://github.com/argoproj/argo-events/pull/3528

No related changes are available here.