AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

argo-workflowsGO-2024-3226

argo-workflows: denial of service

argo-workflows

CVE-2024-47827 · Published Oct 30, 2024 · updated Mar 3, 2026

Medium5.7
No fix yet
Source advisory

Argo Workflows Controller: Denial of Service via malicious daemon Workflows in github.com/argoproj/argo-workflows

Affected versions

PackageAffectedFixed in
github.com/argoproj/argo-workflows
Go
all versionsNo fix yet

Changes since it was listed

SeverityOct 13Severity: Unrated to Medium
Details and references
CVSS 3.1
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Severity from
NVD
Also known as
BIT-argo-workflows-2024-47827, CVE-2024-47827, GHSA-ghjw-32xw-ffwr

More argo-workflows advisories

All argo-workflows
Medium 6.5Nov 5, 2025Argo Workflow may expose artifact repository credentials in github.com/argoproj/argo-workflowsCVE-2025-62157no fix yetHigh 8.1Nov 5, 2025Argo Workflow has a Zipslip Vulnerability in github.com/argoproj/argo-workflowsCVE-2025-62156no fix yetHigh 7.5Dec 2, 2024Argo Workflows Allows Access to Archived Workflows with Fake Token in `client`...CVE-2024-53862no fix yetMedium 6.5Aug 21, 2024Workflow re-write vulnerability using input parameter in github.com/argoproj/argo-workflowsCVE-2021-37914no fix yetUnscoredAug 21, 2024Argo Server TLS requests could be forged by attacker with network access in github.com/argoproj/argo-workflowsGO-2022-0388no fix yetUnscoredAug 21, 2024argo-workflows: privilege escalationGO-2022-0405no fix yet