A security vulnerability exists in the argo-workflows package due to an issue in the Forge (node-forge) JavaScript implementation of Transport Layer Security. The vulnerability affects versions prior to 4.0.15-r2. It has a medium severity rating with a CVSS score of 5.9. A patch is available in version 4.0.15-r2.
A high-severity security vulnerability affects the argo-workflows package due to an issue in the Forge (node-forge) JavaScript implementation of Transport Layer Security. Versions prior to 4.0.15-r2 are impacted. The vulnerability does not affect confidentiality or integrity but results in a high impact on availability. A patch is available in version 4.0.15-r2.
A high-severity security vulnerability affects the argo-workflows package due to an issue in the Forge (node-forge) JavaScript implementation of Transport Layer Security. The vulnerability impacts versions prior to 4.0.15-r2 and can cause a denial of service (availability impact). A fix is available in version 4.0.15-r2.
A security vulnerability exists in the argo-workflows package due to an issue in Forge (node-forge), a native JavaScript implementation of Transport Layer Security. Versions of argo-workflows prior to 4.0.15-r2 are affected. The vulnerability has a medium severity with a CVSS score of 5.9 and impacts the integrity of the system without affecting confidentiality or availability. A fix is available in version 4.0.15-r2.
A high-severity security vulnerability exists in the argo-workflows package affecting versions prior to 4.0.15-r2. The issue involves the Forge (node-forge) library, a native JavaScript implementation of Transport Layer Security (TLS). This vulnerability has been assigned CVE-2026-118782 and has a CVSS score of 7.5, indicating a high impact on integrity without affecting confidentiality or availability. A patch is available in version 4.0.15-r2.
A medium severity security vulnerability affects the argo-workflows package due to an issue in the Forge (node-forge) JavaScript implementation of Transport Layer Security. The vulnerability impacts versions prior to 4.0.15-r2 and can cause availability disruption without compromising confidentiality or integrity. A patch is available in version 4.0.15-r2.
A security vulnerability exists in the argo-workflows package due to its use of Forge (node-forge), a native JavaScript implementation of Transport Layer Security. The affected versions are all versions prior to 4.0.15-r2. The vulnerability has a low severity score and impacts availability with no confidentiality or integrity impact. A patch is available in version 4.0.15-r2.
A high-severity security vulnerability affects the argo-workflows package due to an issue in the Forge (node-forge) JavaScript implementation of Transport Layer Security. The vulnerability impacts versions prior to 4.0.15-r2 and can cause availability disruption. A patch is available in version 4.0.15-r2.
A security vulnerability exists in the argo-workflows package due to its use of Forge (node-forge), a native JavaScript implementation of Transport Layer Security. Versions of argo-workflows prior to 4.0.15-r2 are affected. The vulnerability has a medium severity with a CVSS score of 5.9 and impacts availability but not confidentiality or integrity. A patch is available in version 4.0.15-r2.
A security vulnerability exists in the argo-workflows package due to an issue in the Forge (node-forge) library, which is a native JavaScript implementation of Transport Layer Security. The vulnerability affects versions prior to 4.0.15-r2. The flaw has a medium severity with a CVSS score of 6.5 and impacts integrity and availability without affecting confidentiality. A patch is available in version 4.0.15-r2.
A security vulnerability exists in the argo-workflows package due to an issue in the Forge (node-forge) JavaScript implementation of Transport Layer Security. The vulnerability affects versions prior to 4.0.15-r2. It has a medium severity rating with a CVSS score of 5.3, indicating a network exploitable flaw that impacts integrity without requiring privileges or user interaction. A patch is available in version 4.0.15-r2 to address this issue.
A high-severity security vulnerability exists in the argo-workflows package affecting versions prior to 4.0.15-r2. The issue involves the Picomatch component through version 4. This vulnerability does not impact confidentiality or integrity but causes a denial of service (availability impact). A fix is available in version 4.0.15-r2.
A security vulnerability has been identified in the argo-workflows package due to a weakness in the garycourt uri-js library versions up to 4. This issue affects versions of argo-workflows prior to 4.0.15-r2. The vulnerability has a CVSS score of 4.3, indicating a medium severity level, and it impacts availability without compromising confidentiality or integrity. A fix is available in version 4.0.15-r2.
A low-severity security vulnerability (CVE-2025-7339) affects the argo-workflows package, specifically versions prior to 4.0.15-r2. The vulnerability involves the 'on-headers' node component. It has a CVSS 3.4 score indicating low impact on confidentiality and integrity with no impact on availability.
CVE-2025-68458 is a low-severity security vulnerability affecting the argo-workflows package, specifically versions before 4.0.15-r2. The issue relates to Webpack, a module bundler used within the package. The vulnerability has a CVSS score of 3.7, indicating limited impact on confidentiality and integrity with no availability impact. A fix is available in version 4.0.15-r2.
CVE-2025-68157 is a low-severity security vulnerability affecting the argo-workflows package versions prior to 4.0.15-r2. The issue relates to the use of Webpack, a module bundler, within the package. A fix is available in version 4.0.15-r2.
A security vulnerability in the argo-workflows package involves the webpack-dev-server component, which allows users to run webpack with a development server that supports live reloading. Versions of argo-workflows prior to 4.0.15-r2 are affected. The vulnerability has a CVSS score of 6.5, indicating a medium severity issue. A fix is available in version 4.0.15-r2.
A security vulnerability exists in the argo-workflows package due to the use of webpack-dev-server, which provides a development server with live reloading capabilities. This vulnerability affects versions prior to 4.0.15-r2. The flaw has a medium severity with a CVSS score of 5.9 and impacts confidentiality but not integrity or availability. A fix is available in version 4.0.15-r2.
CVE-2024-52798 is a high severity security vulnerability in the argo-workflows package caused by the path-to-regexp component converting path strings into regular expressions. Versions of argo-workflows prior to 4.0.15-r2 are affected. A fix is available in version 4.0.15-r2.
CVE-2024-52011 is a high-severity vulnerability in the argo-workflows package affecting versions prior to 4.0.15-r2. The issue involves the launch-editor feature, which allows users to open files with line numbers in an editor from Node.js. This vulnerability could lead to high impact on confidentiality and integrity, with limited impact on availability. A fix is available in version 4.0.15-r2.