Advisoriesby Ibisargo-workflowsGO-2024-3303
Argo Workflows Allows Access to Archived Workflows with Fake Token in `client`...
No fix yet
Argo Workflows Allows Access to Archived Workflows with Fake Token in client mode in github.com/argoproj/argo-workflows
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| github.com/argoproj/argo-workflows Go | all versions | No fix yet |
Changes since it was listed
Severity: Unrated to High
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Severity from
- NVD
- Also known as
- BIT-argo-workflows-2024-53862, CVE-2024-53862, GHSA-h36c-m3rf-34h9
More argo-workflows advisories
All argo-workflows
Argo Workflow may expose artifact repository credentials in github.com/argoproj/argo-workflowsCVE-2025-62157no fix yetArgo Workflow has a Zipslip Vulnerability in github.com/argoproj/argo-workflowsCVE-2025-62156no fix yetargo-workflows: denial of serviceCVE-2024-47827no fix yetWorkflow re-write vulnerability using input parameter in github.com/argoproj/argo-workflowsCVE-2021-37914no fix yetArgo Server TLS requests could be forged by attacker with network access in github.com/argoproj/argo-workflowsGO-2022-0388no fix yetargo-workflows: privilege escalationGO-2022-0405no fix yet