GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
5 advisories
Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list (Incomplete fix for CVE-2026-31892)
High
CVE-2026-54526
was published
for
github.com/argoproj/argo-workflows
(Go)
Aug 13, 2026
Argo Vulnerable to Unauthenticated Memory Exhaustion (DoS) in Webhook Interceptor
High
CVE-2026-42294
was published
for
github.com/argoproj/argo-workflows/v3
(Go)
May 4, 2026
Argo vulnerable to exposure of artifact repository credentials
High
CVE-2026-42295
was published
for
github.com/argoproj/argo-workflows/v4
(Go)
May 4, 2026
Argo has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure
High
CVE-2026-42296
was published
for
github.com/argoproj/argo-workflows/v3
(Go)
May 4, 2026
Argo has Missing Authorization in its Sync ConfigMap Provider
High
CVE-2026-42297
was published
for
github.com/argoproj/argo-workflows/v4
(Go)
May 4, 2026
ProTip!
Advisories are also available from the
GraphQL API