AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

argo-workflowsGO-2022-0928

Workflow re-write vulnerability using input parameter in github.com/argoproj/argo-workflows

argo-workflows

CVE-2021-37914 · Published Aug 21, 2024 · updated Mar 3, 2026

Medium6.5
No fix yet
Source advisory

Affected versions

PackageAffectedFixed in
github.com/argoproj/argo-workflows
Go
all versionsNo fix yet

Changes since it was listed

SeverityOct 13Severity: Unrated to Medium
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Severity from
NVD
Also known as
BIT-argo-workflows-2021-37914, CVE-2021-37914, GHSA-h563-xh25-x54q

More argo-workflows advisories

All argo-workflows
Medium 6.5Nov 5, 2025Argo Workflow may expose artifact repository credentials in github.com/argoproj/argo-workflowsCVE-2025-62157no fix yetHigh 8.1Nov 5, 2025Argo Workflow has a Zipslip Vulnerability in github.com/argoproj/argo-workflowsCVE-2025-62156no fix yetHigh 7.5Dec 2, 2024Argo Workflows Allows Access to Archived Workflows with Fake Token in `client`...CVE-2024-53862no fix yetMedium 5.7Oct 30, 2024argo-workflows: denial of serviceCVE-2024-47827no fix yetUnscoredAug 21, 2024Argo Server TLS requests could be forged by attacker with network access in github.com/argoproj/argo-workflowsGO-2022-0388no fix yetUnscoredAug 21, 2024argo-workflows: privilege escalationGO-2022-0405no fix yet