rootio-github.com/argoproj/argo-workflows/v3 vulnerabilities (Root)

7 vulnerabilities.

• rootio-github.com/argoproj/argo-workflows/v3 Root Argo Workflows has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure CVE-2026-42296 Fix available 8.1 HighMay 4, 2026
• rootio-github.com/argoproj/argo-workflows/v3 Root Argo Workflows: Unauthenticated Memory Exhaustion (DoS) in Webhook Interceptor CVE-2026-42294 Fix available 8.2 HighMay 4, 2026
• rootio-github.com/argoproj/argo-workflows/v3 Root WorkflowTemplate Security Bypass via podSpecPatch in Strict/Secure Reference Mode CVE-2026-31892 Fix available 8.9 HighMarch 11, 2026
• rootio-github.com/argoproj/argo-workflows/v3 Root Argo Workflows has unauthorized access to Argo Workflows Template CVE-2026-28229 Fix available 9.8 CriticalMarch 11, 2026
• rootio-github.com/argoproj/argo-workflows/v3 Root argoproj/argo-workflows is vulnerable to RCE via ZipSlip and symbolic links CVE-2025-66626 Fix available 8.1 HighDecember 9, 2025
• rootio-github.com/argoproj/argo-workflows/v3 Root argo-workflows Zip Slip path traversal allows arbitrary file write and container configuration overwrite CVE-2025-62156 Fix available 8.1 HighOctober 14, 2025
• rootio-github.com/argoproj/argo-workflows/v3 Root Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode CVE-2024-53862 Fix available 6.3 MediumDecember 2, 2024