Advisoriesby Ibisargo-workflowsGO-2026-5235
Argo vulnerable to exposure of artifact repository credentials in github.com/argoproj/argo-workflows
No fix yet
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| github.com/argoproj/argo-workflows Go | all versions | No fix yet |
Changes since it was listed
Severity: Unrated to Medium
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
- Severity from
- NVD
- Also known as
- BIT-argo-workflows-2026-42295, CVE-2026-42295, GHSA-7vf8-2cr6-54mf
- github.com/argoproj/argo-workflows/security/advisories/GHSA-7vf8-2cr6-54mf
- nvd.nist.gov/vuln/detail/CVE-2026-42295
- github.com/argoproj/argo-workflows/commit/bdd40908580f727c590c8743836e338b04fe4a87
- github.com/argoproj/argo-workflows/blob/59f1089b9875723ddffd524513e6bd5cb37e5e31/workflow/artifacts/logging/driver.go#L24
- github.com/argoproj/argo-workflows/releases/tag/v4.0.5
- github.com/argoproj/argo-workflows/security/advisories/GHSA-c2hv-4pfj-mm2r
More argo-workflows advisories
All argo-workflows
argo-workflows: improper access controlCVE-2026-54526no fix yetArgo has Missing Authorization in its Sync ConfigMap Provider in github.com/argoproj/argo-workflowsCVE-2026-42297no fix yetArgo Affected by SSO RBAC Delegation Nil Pointer Dereference DoSCVE-2026-42183no fix yetArgo Vulnerable to Unauthenticated Memory ExhaustionCVE-2026-42294no fix yetArgo has incomplete fix for CVE-2026-31892CVE-2026-42296no fix yetArgo Workflows: Unchecked annotation parsing in pod informer crashes Argo...CVE-2026-40886no fix yet