PT-2021-21906

🗓️ 02 Aug 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 1 Views

Argo Workflows vulnerability: untrusted input in expression templates can disrupt workflows; affects 3.1.3 and earlier; workaround: disable expression templates.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2021-37914	3 Aug 202107:27	–	circl
CNNVD	Argo 输入验证错误漏洞	2 Aug 202100:00	–	cnnvd
CVE	CVE-2021-37914	2 Aug 202123:17	–	cve
Cvelist	CVE-2021-37914	2 Aug 202123:17	–	cvelist
EUVD	EUVD-2021-1738	7 Oct 202500:30	–	euvd
Github Security Blog	Workflow re-write vulnerability using input parameter	9 Aug 202120:37	–	github
GitLab Advisory Database	Improper Input Validation	9 Aug 202100:00	–	gitlab
NVD	CVE-2021-37914	3 Aug 202100:15	–	nvd
OSV	BIT-ARGO-WORKFLOWS-2021-37914	6 Mar 202410:50	–	osv
OSV	GHSA-H563-XH25-X54Q Workflow re-write vulnerability using input parameter	9 Aug 202120:37	–	osv

Source	Link
github	www.github.com/argoproj/argo-workflows/commit/2a2ecc916925642fd8cb1efd026588e6828f82e1
github	www.github.com/argoproj/argo-workflows/security/advisories/GHSA-h563-xh25-x54q
osv	www.osv.dev/vulnerability/GO-2022-0928
t	www.t.me/cveNotify/152002
osv	www.osv.dev/vulnerability/BIT-argo-workflows-2021-37914
t	www.t.me/cibsecurity/26726
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-37914
github	www.github.com/argoproj/argo-workflows/pull/6285
osv	www.osv.dev/vulnerability/CVE-2021-37914
github	www.github.com/argoproj/argo-workflows/pull/6442

13 Feb 2026 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.16.5

CVSS 25.8

EPSS0.00271