CLEANSTART-2026-GP43617 Security fixes in argo-workflows 3.7.17-r2

Package argo-workflows version 3.7.17-r2 fixes 1 vulnerabilities: ghsa-259r-337f-4rfw...

CLEANSTART-2026-QH76136 Security fixes in argo-workflows-fips 4.0.6-r1

Package argo-workflows-fips version 4.0.6-r1 fixes 8 vulnerabilities: ghsa-crhj-59gh-8x96, ghsa-389r-gv7p-r3rp, ghsa-m7cr-m3pv-hgrp, ghsa-w5pp-99ch-qj29, CVE-2026-45022...

PT-2026-85890

Package argo-workflows version 3.7.17-r2 fixes 1 vulnerabilities: ghsa-259r-337f-4rfw...

PT-2026-85868

Package argo-workflows version 3.7.17-r1 fixes 16 vulnerabilities: ghsa-3ppc-4f35-3m26, ghsa-7r86-cg39-jmmj, ghsa-23c5-xmqv-rm74, ghsa-xv26-6w52-cph6, ghsa-q3j6-qgpj-74h6...

SUSE CVE-2026-40886

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. From 3.6.5 to 4.0.4, an unchecked array index in the pod informer's podGCFromPod function causes a controller-wide panic when a workflow pod carries a malformed...

SUSE CVE-2026-42183

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. From version 4.0.0 to before version 4.0.5, a nil pointer dereference in server/auth/gatekeeper.go rbacAuthorization causes a panic denial of service for SSO users whose claims match a...

SUSE CVE-2026-42294

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Prior to versions 3.7.14 and 4.0.5, the Webhook Interceptor loads the entire request body into memory before authenticating the request or verifying its signature. This occurs on the...

SUSE CVE-2026-42295

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. From version 4.0.0 to before version 4.0.5, the workflow executor logs all artifact repository credentials S3 access keys, secret keys, GCS service account keys, Azure account keys, Gi...

SUSE CVE-2026-42296

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Prior to versions 3.7.14 and 4.0.5, a user with create Workflow permission can bypass templateReferencing: Strict to get host network access, switch service accounts, override pod...

SUSE CVE-2026-42297

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. From version 4.0.0 to before version 4.0.5, the Sync Service's ConfigMap-backed provider server/sync/synccm.go performs zero authorization checks on all CRUD operations create, read,...

CLEANSTART-2026-NL91750 Security fixes in argo-workflows 4.0.3-r0

Package argo-workflows version 4.0.3-r0 fixes 1 vulnerabilities: CVE-2026-33186...

CLEANSTART-2026-AO47518 Security fixes in argo-workflows 3.7.8-r0

Package argo-workflows version 3.7.8-r0 fixes 2 vulnerabilities: CVE-2025-68121, CVE-2026-25934...

CLEANSTART-2026-EK75112 Security fixes in argo-workflows 3.7.10-r4

Package argo-workflows version 3.7.10-r4 fixes 2 vulnerabilities: ghsa-p436-gjf2-799p, CVE-2025-15558...

CLEANSTART-2026-ZH29186 Security fixes in argo-workflows 4.0.2-r0

Package argo-workflows version 4.0.2-r0 fixes 2 vulnerabilities: CVE-2025-15558, ghsa-p436-gjf2-799p...

CLEANSTART-2026-WT13041 Security fixes in argo-workflows-fips 3.6.17-r0

Package argo-workflows-fips version 3.6.17-r0 fixes 1 vulnerabilities: CVE-2025-68121...

CLEANSTART-2026-CQ37480 Security fixes in argo-workflows-fips 3.6.15-r1

Package argo-workflows-fips version 3.6.15-r1 fixes 2 vulnerabilities: ghsa-cfpf-hrx2-8rv6, ghsa-2x5j-vhc8-9cwm...

CLEANSTART-2026-XI65728 Security fixes in argo-workflows-fips 3.6.18 r0

Package argo-workflows-fips version 3.6.18 r0 fixes 2 vulnerabilities: CVE-2026-24051, CVE-2026-27141...

CLEANSTART-2026-UB33611 Security fixes in argo-workflows 4.0.4-r1

Package argo-workflows version 4.0.4-r1 fixes 5 vulnerabilities: CVE-2026-35469, CVE-2026-33816, CVE-2026-33815, ghsa-3xc5-wrhm-f963, ghsa-j88v-2chj-qfwx...

CLEANSTART-2026-ZW70206 Security fixes in argo-workflows-fips 3.7.0-r0

Package argo-workflows-fips version 3.7.0-r0 fixes 3 vulnerabilities: CVE-2025-47907, CVE-2025-0913, CVE-2025-4673...

CLEANSTART-2026-YZ00347 Security fixes in argo-workflows 4.0.4-r0

Package argo-workflows version 4.0.4-r0 fixes 6 vulnerabilities: CVE-2026-34986, CVE-2026-39883, CVE-2026-39882, ghsa-hfvc-g4fc-pqhx, ghsa-w8rr-5gcm-pp58...