AR
Product
argo-workflows
18
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 1High 11Medium 6Low 0
Watch
Add argo-workflows to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-42183 | 6.5 | May 9 | Argo Workflows: SSO RBAC Delegation Nil Pointer Dereference DoS (gatekeeper.go) Affected: >= 4.0.0, < 4.0.5 |
| CVE-2025-62157 | 6.5 | Oct 14 | Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes Affected: before 3.6.12; 3.7.0 before 3.7.3 |
| CVE-2021-37914 | 6.5 | Aug 3 | In Argo Workflows through 3.1.3, if EXPRESSION_TEMPLATES is enabled and untrusted users are allowed to specify input parameters when running workflows, an attacker may be able to… Affected: through 3.1.3 |
| CVE-2026-23960 | 5.4 | Jan 21 | Argo Workflows affected by stored XSS in the artifact directory listing Affected: < 3.6.17; >= 3.7.0, < 3.7.8 |
| CVE-2026-42295 | 4.9 | May 9 | Argo Workflows: Exposure of artifact repository credentials Affected: >= 4.0.0, < 4.0.5 |
| CVE-2024-47827 | 4.8 | Oct 28 | Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes Affected: 3.6.0 |
Showing 6
