CLEANSTART-2026-TC19011 Impact: A bad regular expression is generated any time you have three or more parameters within a single segment, separated by something that is not a period (

Security vulnerability affects the argo-workflows package. Impact: A bad regular expression is generated any time you have three or more parameters within a single segment, separated by something that is not a period...

CLEANSTART-2026-BB25914 Immutable

Security vulnerability affects the argo-workflows package. Immutable...

CLEANSTART-2026-DV63106 path-to-regexp turns path strings into a regular expressions

Security vulnerability affects the argo-workflows package. path-to-regexp turns path strings into a regular expressions...

CLEANSTART-2026-NK73842 Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript

Security vulnerability affects the argo-workflows package. Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript...

CLEANSTART-2026-KQ19093 flatted is a circular JSON parser

Security vulnerability affects the argo-workflows package. flatted is a circular JSON parser...

CLEANSTART-2026-HE25090 Browserslist is a configuration tool for sharing target browsers and Node

Security vulnerability affects the argo-workflows package. Browserslist is a configuration tool for sharing target browsers and Node...

CLEANSTART-2026-RQ08724 minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects

Security vulnerability affects the argo-workflows package. minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects...

CLEANSTART-2026-IH43299 Browserslist is a configuration tool for sharing target browsers and Node

Security vulnerability affects the argo-workflows package. Browserslist is a configuration tool for sharing target browsers and Node...

CLEANSTART-2026-FU60890 moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates

Security vulnerability affects the argo-workflows package. moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates...

CLEANSTART-2026-KL34343 minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects

Security vulnerability affects the argo-workflows package. minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects...

CLEANSTART-2026-CI28358 minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects

Security vulnerability affects the argo-workflows package. minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects...

CLEANSTART-2026-YL84506 On Unix systems, opening a file in an os

Security vulnerability affects the argo-workflows package. On Unix systems, opening a file in an os...

CLEANSTART-2026-CU60639 net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines

Security vulnerability affects the argo-workflows package. The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines...

CLEANSTART-2026-RI71860 js-yaml is a JavaScript YAML parser and dumper

Security vulnerability affects the argo-workflows package. js-yaml is a JavaScript YAML parser and dumper...

CLEANSTART-2026-PV37228 Security fix for ghsa-5p4m-2wfm-xmqj applied in: argo-workflows 4.0.12-r1

Security vulnerability affects the argo-workflows package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-EW49412 Dial and LookupPort functions panic on Windows when provided with an input containing a NUL (0)

Security vulnerability affects the argo-workflows package. The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL 0...

CLEANSTART-2026-FQ89941 form-data is a library for creating readable multipart/form-data streams

Security vulnerability affects the argo-workflows package. form-data is a library for creating readable multipart/form-data streams...

CLEANSTART-2026-ZC37242 Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322

Security vulnerability affects the argo-workflows package. Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322...

CLEANSTART-2026-ZD25071 Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations

Security vulnerability affects the argo-workflows package. Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations...

CLEANSTART-2026-MO36230 When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0

Security vulnerability affects the argo-workflows package. When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGSMAXFRAMESIZE with a value of 0...