Go/github.com/argoproj/argo-workflows/v3

Argo has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure

Modified: 6/25/2026

Argo Workflows: WorkflowTemplate Security Bypass via podSpecPatch in Strict/Secure Reference Mode

Modified: 9/10/2026

Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list (Incomplete fix for CVE-2026-31892)

Modified: 9/10/2026

Unauthorized access to Argo Workflows Template

Modified: 9/10/2026

Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows Controller

Modified: 9/10/2026

Argo Server TLS requests could be forged by attacker with network access

Modified: 8/21/2024

Argo Workflow may expose artifact repository credentials

Modified: 9/10/2026

Malicious HTML+XHR Artifact Privilege Escalation in Argo Workflows

Modified: 9/10/2026

Argo Workflows affected by stored XSS in the artifact directory listing

Modified: 9/10/2026

Argo Workflows Controller: Denial of Service via malicious daemon Workflows

Modified: 2/6/2026

Access to Archived Argo Workflows with Fake Token in `client` mode

Modified: 9/10/2026

Workflow re-write vulnerability using input parameter

Modified: 8/21/2024

Argo Vulnerable to Unauthenticated Memory Exhaustion (DoS) in Webhook Interceptor

Modified: 7/21/2026

Argo Workflow has a Zipslip Vulnerability

Modified: 9/10/2026

Potential privilege escalation on Kubernetes >= v1.19 when the Argo Sever is run with `--auth-mode=client`

Modified: 8/21/2024

RCE via ZipSlip and symbolic links in argoproj/argo-workflows

Modified: 9/10/2026

Argo Server TLS requests could be forged by attacker with network access in github.com/argoproj/argo-workflows

Modified: 3/3/2026

Potential privilege escalation on Kubernetes >= v1.19 when the Argo Sever is run with `--auth-mode=client` in github.com/argoproj/argo-workflows

Modified: 3/3/2026

Workflow re-write vulnerability using input parameter in github.com/argoproj/argo-workflows

Modified: 3/3/2026

Argo Workflows Controller: Denial of Service via malicious daemon Workflows in github.com/argoproj/argo-workflows

Modified: 3/3/2026

Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode in github.com/argoproj/argo-workflows

Modified: 2/4/2026

Argo Workflow has a Zipslip Vulnerability in github.com/argoproj/argo-workflows

Modified: 2/4/2026

Argo Workflow may expose artifact repository credentials in github.com/argoproj/argo-workflows

Modified: 2/4/2026

RCE via ZipSlip and symbolic links in argoproj/argo-workflows in github.com/argoproj/argo-workflows

Modified: 2/4/2026

Argo Workflows affected by stored XSS in the artifact directory listing in github.com/argoproj/argo-workflows

Modified: 2/4/2026

Unauthorized access to Argo Workflows Template in github.com/argoproj/argo-workflows

Modified: 3/23/2026

Argo Workflows: WorkflowTemplate Security Bypass via podSpecPatch in Strict/Secure Reference Mode in github.com/argoproj/argo-workflows

Modified: 3/23/2026

Argo has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure in github.com/argoproj/argo-workflows

Modified: 6/25/2026

Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows Controller in github.com/argoproj/argo-workflows

Modified: 6/26/2026

Argo vulnerable to exposure of artifact repository credentials in github.com/argoproj/argo-workflows

Modified: 7/2/2026

Argo Vulnerable to Unauthenticated Memory Exhaustion (DoS) in Webhook Interceptor in github.com/argoproj/argo-workflows

Modified: 6/25/2026

Argo Affected by SSO RBAC Delegation Nil Pointer Dereference DoS (gatekeeper.go) in github.com/argoproj/argo-workflows

Modified: 7/2/2026

Argo has Missing Authorization in its Sync ConfigMap Provider in github.com/argoproj/argo-workflows

Modified: 7/2/2026

Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list (Incomplete fix for CVE-2026-31892) in github.com/argoproj/argo-workflows

Modified: 8/18/2026