Product by Go
Github.com/argoproj/argo-workflows/v3
10 known vulnerabilities in Github.com/argoproj/argo-workflows/v3 (Go), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-54526 | Argoproj Argo-workflows: Improper Access Control | 9.9 | |
| Critical | CVE-2026-28229 | Argo Workflows has unauthorized access to Argo Workflows Template | 9.8 | |
| High | CVE-2026-42294 | Argo Workflows: Unauthenticated Memory Exhaustion (DoS) in Webhook Interceptor | 7.5 | |
| High | CVE-2026-42296 | Argoproj Argo-workflows: Incorrect Authorization | 8.1 | |
| High | CVE-2024-53862 | Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode | 7.5 | |
| High | CVE-2022-29164 | Privilege Escalation in argo-workflows | 7.1 | |
| High | CVE-2026-40886 | Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows controller | 7.7 | |
| Medium | CVE-2021-37914 | Argoproj Argo Workflows: security vulnerability | 6.5 | |
| High | CVE-2026-23960 | Argo Workflows affected by stored XSS in the artifact directory listing | 5.4 | |
| Medium | CVE-2024-47827 | Argo Workflows Controller: Denial of Service via malicious daemon Workflows | 5.7 |