CVE-2026-97711 vulnerabilities

Vulnerabilities for packages: argo-workflows...

GHSA-GFHX-HW2G-V5HG vulnerabilities

Vulnerabilities for packages: argo-workflows...

GHSA-GFHX-HW2G-V5HG vulnerabilities

Vulnerabilities for packages: argo-workflows...

CVE-2026-97711 vulnerabilities

Vulnerabilities for packages: argo-workflows...

BIT-ARGO-WORKFLOWS-2026-93991 Argo Workflows 4.1.0 through 4.1.3 Cross-Namespace Disclosure via Negated Selector

Argo Workflows versions 4.1.0 through 4.1.3 contain an authorization bypass vulnerability in ListArchivedWorkflows that fails to apply cluster-scoped access review when the metadata.namespace field selector uses the NotEquals operator. Attackers with namespace-scoped list permissions can use a...

CLEANSTART-2026-GA82552 Babel is a compiler for writing next generation JavaScript

Security vulnerability affects the argo-workflows package. Babel is a compiler for writing next generation JavaScript...

CLEANSTART-2026-YT66630 webpack-dev-server allows users to use webpack with a development server that provides live reloading

Security vulnerability affects the argo-workflows package. webpack-dev-server allows users to use webpack with a development server that provides live reloading...

CLEANSTART-2026-GV24243 Serialize JavaScript to a superset of JSON that includes regular expressions and functions

Security vulnerability affects the argo-workflows package. Serialize JavaScript to a superset of JSON that includes regular expressions and functions...

CLEANSTART-2026-QQ95975 Security fix for ghsa-5c6j-r48x-rmvq applied in: argo-workflows 4.0.12-r1

Security vulnerability affects the argo-workflows package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ZQ97544 path-to-regexp turns path strings into a regular expressions

Security vulnerability affects the argo-workflows package. path-to-regexp turns path strings into a regular expressions...

CLEANSTART-2026-NW68824 Impact: In body-parser versions prior to 1

Security vulnerability affects the argo-workflows package. Impact: In body-parser versions prior to 1...

CLEANSTART-2026-QN85900 Picomatch is a glob matcher written JavaScript

Security vulnerability affects the argo-workflows package. Picomatch is a glob matcher written JavaScript...

CLEANSTART-2026-WO79894 websocket-driver is a WebSocket protocol handler with pluggable I/O

Security vulnerability affects the argo-workflows package. websocket-driver is a WebSocket protocol handler with pluggable I/O...

CLEANSTART-2026-XS33213 shell-quote prior to 1

Security vulnerability affects the argo-workflows package. shell-quote prior to 1...

CLEANSTART-2026-XZ43182 launch-editor allows users to open files with line numbers in editor from Node

Security vulnerability affects the argo-workflows package. launch-editor allows users to open files with line numbers in editor from Node...

CLEANSTART-2026-BI32681 Immutable

Security vulnerability affects the argo-workflows package. Immutable...

CLEANSTART-2026-DV63106 path-to-regexp turns path strings into a regular expressions

Security vulnerability affects the argo-workflows package. path-to-regexp turns path strings into a regular expressions...

CLEANSTART-2026-ER79648 Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript

Security vulnerability affects the argo-workflows package. Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript...

CLEANSTART-2026-BB25914 Immutable

Security vulnerability affects the argo-workflows package. Immutable...

CLEANSTART-2026-ZJ53876 Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript

Security vulnerability affects the argo-workflows package. Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript...