1874 matches found
CLEANSTART-2026-MW03453 Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript
Security vulnerability affects the argo-workflows package. Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript...
PT-2026-108585
Security vulnerability affects the argo-workflows package. On Unix systems, opening a file in an os...
PT-2026-108367
Security vulnerability affects the argo-workflows package. minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects...
PT-2026-108426
Security vulnerability affects the argo-workflows package. Browserslist is a configuration tool for sharing target browsers and Node...
PT-2026-108418
Security vulnerability affects the argo-workflows package. Browserslist is a configuration tool for sharing target browsers and Node...
PT-2026-108377
Security vulnerability affects the argo-workflows package. proxy-addr is a Node...
PT-2026-108581
Security vulnerability affects the argo-workflows package. launch-editor allows users to open files with line numbers in editor from Node...
CVE-2026-71899: Incorrect Authorization
A missing authorization vulnerability exists in the query-dynamic-sub-workflows API of Apache DolphinScheduler. The API does not properly verify whether the authenticated user has permission to access the workflows being queried. An authenticated user who does not have permission to access a...
PT-2026-108378
Security vulnerability affects the argo-workflows package. The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines...
PT-2026-102717
Argo Workflows versions 4.1.0 through 4.1.3 contain an authorization bypass vulnerability in ListArchivedWorkflows that fails to apply cluster-scoped access review when the metadata.namespace field selector uses the NotEquals operator. Attackers with namespace-scoped list permissions can use a...
PT-2026-108544
Security vulnerability affects the argo-workflows package. Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU...
PT-2026-108466
Security vulnerability affects the argo-workflows package. websocket-driver is a WebSocket protocol handler with pluggable I/O...
PT-2026-108471
Security vulnerability affects the argo-workflows package. When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS MAX FRAME SIZE with a value of 0...
PT-2026-108598
Security vulnerability affects the argo-workflows package. path-to-regexp turns path strings into a regular expressions...
PT-2026-108386
Security vulnerability affects the argo-workflows package. path-to-regexp turns path strings into a regular expressions...
PT-2026-108354
Security vulnerability affects the argo-workflows package. Immutable...
PT-2026-108524
Security vulnerability affects the argo-workflows package. flatted is a circular JSON parser...
PT-2026-108405
Security vulnerability affects the argo-workflows package. moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates...
PT-2026-108353
Security vulnerability affects the argo-workflows package. Immutable...
PT-2026-102614
A missing authorization vulnerability exists in the query-dynamic-sub-workflows API of Apache DolphinScheduler. The API does not properly verify whether the authenticated user has permission to access the workflows being queried. An authenticated user who does not have permission to access a...