GO-2026-5072 Argo has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure in github.com/argoproj/argo-workflows

Argo has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure in github.com/argoproj/argo-workflows...

CVE-2026-31892

creationtimestamp| type| source ---|---|--- 2026-03-11 10:08:46+00:00| published-proof-of-concept| https://github.com/argoproj/argo-workflows/security/advisories/GHSA-3wf5-g532-rcrr 2026-03-11 15:16:44+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-31892...