CLEANSTART-2026-CW68169 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Multiple security vulnerabilities affect the argo-workflows package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

Golang 1.26.x < 1.26.6 DoS

The version of Golang running on the remote host is 1.26.x prior to 1.26.6. It is, therefore, affected by a denial of service vulnerability in the bundled golang.org/x/net/dns/dnsmessage package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the messag...