OSV - Open Source Vulnerabilities

CLEANSTART-2026-BY71381

CleanStart/argo-workflows-fips

SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption

2 days ago

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-CV28298

CleanStart/argo-workflows-fips

SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption

2 days ago

Fix available
Severity - 9.8 (Critical)

GO-2025-4024

Go/github.com/argoproj/argo-workflows
Go/github.com/argoproj/argo-workflows/v2
Go/github.com/argoproj/argo-workflows/v3

Argo Workflow may expose artifact repository credentials in github.com/argoproj/argo-workflows

05 Nov 2025

Fix available

BIT-argo-workflows-2025-62157

Bitnami/argo-workflows

Argo Workflows exposes artifact repository credentials in workflow-controller logs

17 Oct 2025

Fix available
Severity - 8.5 (High)

MINI-qjcw-r685-4j56

MinimOS/argo-workflow-cli-fips-3.6
MinimOS/argo-workflow-controller-compat-fips-3.6
MinimOS/argo-workflow-controller-fips-3.6
MinimOS/argo-workflow-executor-compat-fips-3.6
MinimOS/argo-workflow-executor-fips-3.6
... 2 more

See record for full details

16 Oct 2025

Fix available

MINI-8v8f-hm66-h2wc

MinimOS/argo-workflow-cli-3.6
MinimOS/argo-workflow-controller-3.6
MinimOS/argo-workflow-controller-compat-3.6
MinimOS/argo-workflow-executor-3.6
MinimOS/argo-workflow-executor-compat-3.6
... 3 more

See record for full details

16 Oct 2025

Fix available

MINI-7cg9-q64h-p623

MinimOS/argo-workflow-cli-3.7
MinimOS/argo-workflow-controller-3.7
MinimOS/argo-workflow-controller-compat-3.7
MinimOS/argo-workflow-executor-3.7
MinimOS/argo-workflow-executor-compat-3.7
... 3 more

See record for full details

16 Oct 2025

Fix available

MINI-vr43-286c-325r

MinimOS/argo-workflow-cli-fips-3.7
MinimOS/argo-workflow-controller-compat-fips-3.7
MinimOS/argo-workflow-controller-fips-3.7
MinimOS/argo-workflow-executor-compat-fips-3.7
MinimOS/argo-workflow-executor-fips-3.7
... 2 more

See record for full details

16 Oct 2025

Fix available

GHSA-c2hv-4pfj-mm2r

Go/github.com/argoproj/argo-workflows/v3

Argo Workflow may expose artifact repository credentials

14 Oct 2025

Fix available
Severity - 8.5 (High)

CVE-2025-62157

github.com/argoproj/argo-workflows

Argo Workflows exposes artifact repository credentials in workflow-controller logs

14 Oct 2025

Fix available
Severity - 8.5 (High)