772 matches found
CLEANSTART-2026-FQ89941 form-data is a library for creating readable multipart/form-data streams
Security vulnerability affects the argo-workflows package. form-data is a library for creating readable multipart/form-data streams...
CLEANSTART-2026-LF83973 NPM package `braces`, versions prior to 3
Security vulnerability affects the argo-workflows package. The NPM package braces, versions prior to 3...
CLEANSTART-2026-LI51874 ajv (Another JSON Schema Validator) before 8
Security vulnerability affects the argo-workflows package. ajv Another JSON Schema Validator before 8...
CLEANSTART-2026-NJ03558 brace-expansion through 5
Security vulnerability affects the argo-workflows package. brace-expansion through 5...
CLEANSTART-2026-IQ33916 compression is a Node
Security vulnerability affects the argo-workflows package. compression is a Node...
CLEANSTART-2026-JD77118 Versions of the package cross-spawn before 6
Security vulnerability affects the argo-workflows package. Versions of the package cross-spawn before 6...
CLEANSTART-2026-CT50806 proxy-addr is a Node
Security vulnerability affects the argo-workflows package. proxy-addr is a Node...
CLEANSTART-2026-CI27531 brace-expansion library generates arbitrary strings containing a common prefix and suffix
Security vulnerability affects the argo-workflows package. The brace-expansion library generates arbitrary strings containing a common prefix and suffix...
CLEANSTART-2026-UX64069 brace-expansion through 5
Security vulnerability affects the argo-workflows package. brace-expansion through 5...
CLEANSTART-2026-MI43337 websocket-driver is a WebSocket protocol handler with pluggable I/O
Security vulnerability affects the argo-workflows package. websocket-driver is a WebSocket protocol handler with pluggable I/O...
CLEANSTART-2026-YP71485 Immutable
Security vulnerability affects the argo-workflows package. Immutable...
CLEANSTART-2026-IW41585 Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP)
Security vulnerability affects the argo-workflows package. Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution HPP...
CLEANSTART-2026-JC29454 shell-quote's `quote()` function did not validate object-token inputs against the operator model used by `parse()`
Security vulnerability affects the argo-workflows package. shell-quote's quote function did not validate object-token inputs against the operator model used by parse...
CLEANSTART-2026-MW03453 Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript
Security vulnerability affects the argo-workflows package. Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript...
CLEANSTART-2026-SB96942 flatted is a circular JSON parser
Security vulnerability affects the argo-workflows package. flatted is a circular JSON parser...
PT-2026-108378
Security vulnerability affects the argo-workflows package. The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines...
PT-2026-108377
Security vulnerability affects the argo-workflows package. proxy-addr is a Node...
PT-2026-108544
Security vulnerability affects the argo-workflows package. Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU...
PT-2026-102717
Argo Workflows versions 4.1.0 through 4.1.3 contain an authorization bypass vulnerability in ListArchivedWorkflows that fails to apply cluster-scoped access review when the metadata.namespace field selector uses the NotEquals operator. Attackers with namespace-scoped list permissions can use a...