Advisoriesby Ibis
argo-workflows security advisories
19 advisories · 9 critical or high in 12 months · latest Aug 13
19 advisories
argo-workflows: improper access controlCVE-2026-54526no fix yetArgo has Missing Authorization in its Sync ConfigMap Provider in github.com/argoproj/argo-workflowsCVE-2026-42297no fix yetArgo Affected by SSO RBAC Delegation Nil Pointer Dereference DoSCVE-2026-42183no fix yetArgo Vulnerable to Unauthenticated Memory ExhaustionCVE-2026-42294no fix yetArgo vulnerable to exposure of artifact repository credentials in github.com/argoproj/argo-workflowsCVE-2026-42295no fix yetArgo has incomplete fix for CVE-2026-31892CVE-2026-42296no fix yetArgo Workflows: Unchecked annotation parsing in pod informer crashes Argo...CVE-2026-40886no fix yetUnauthorized access to Argo Workflows Template in github.com/argoproj/argo-workflowsCVE-2026-28229no fix yetArgo Workflows: WorkflowTemplate Security Bypass via podSpecPatch in Strict/Secure Reference ModeCVE-2026-31892no fix yetArgo Workflows affected by stored XSS in the artifact directory listingCVE-2026-23960no fix yetRCE via ZipSlip and symbolic links in argoproj/argo-workflowsCVE-2025-66626no fix yetArgo Workflow has a Zipslip Vulnerability in github.com/argoproj/argo-workflowsCVE-2025-62156no fix yetArgo Workflow may expose artifact repository credentials in github.com/argoproj/argo-workflowsCVE-2025-62157no fix yetArgo Workflows Allows Access to Archived Workflows with Fake Token in `client`...CVE-2024-53862no fix yetargo-workflows: denial of serviceCVE-2024-47827no fix yetWorkflow re-write vulnerability using input parameter in github.com/argoproj/argo-workflowsCVE-2021-37914no fix yetArgo Server TLS requests could be forged by attacker with network access in github.com/argoproj/argo-workflowsGO-2022-0388no fix yetargo-workflows: privilege escalationGO-2022-0405no fix yetAttack on Kubernetes via Misconfigured Argo WorkflowsGHSA-rc7p-gmvh-xfx2no fix yetAbout argo-workflows
Workflow Engine for Kubernetes
Packages watched: github.com/argoproj/argo-workflows (Go).