Login Request a demo
AR
Product
argo-workflows
by argoproj · last CVE Sep 19, 2026
18
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities18In the news0Timeline
Severity mix
Critical 1High 11Medium 6Low 0
Severity
All severities18Critical1High11Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add argo-workflows to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-42183
6.5
0%
May 9
Argo Workflows: SSO RBAC Delegation Nil Pointer Dereference DoS (gatekeeper.go)
Affected: >= 4.0.0, < 4.0.5
CVE-2025-62157
6.5
0%
Oct 14
Argo Workflows exposes artifact repository credentials in workflow-controller logs
Affected: >= 3.7.0, < 3.7.3; < 3.6.12
CVE-2021-37914
6.5
1%
Aug 3
In Argo Workflows through 3.1.3, if EXPRESSION_TEMPLATES is enabled and untrusted users are allowed to specify input parameters when running workflows, an attacker may be able to…
Affected: through 3.1.3
CVE-2026-23960
5.4
0%
Jan 21
Argo Workflows affected by stored XSS in the artifact directory listing
Affected: < 3.6.17; >= 3.7.0, < 3.7.8
CVE-2026-42295
4.9
0%
May 9
Argo Workflows: Exposure of artifact repository credentials
Affected: >= 4.0.0, < 4.0.5
CVE-2024-47827
4.8
0%
Oct 28
Argo Workflows Controller: Denial of Service via malicious daemon Workflows
Affected: >= 3.6.0-rc1, < 3.6.0-rc2
Showing 6