Threats tagged 'cleanstart-2026-ih90373'

A security vulnerability has been identified in the argo-workflows package, specifically related to the fast-uri component, which is a dependency-free RFC 3986 URI parser and serializer for Node.js. Versions of argo-workflows prior to 4.1.6-r1 are affected. The vulnerability has a CVSS 3.1 base score of 6.1, indicating a medium severity issue. It allows an attacker to cause partial confidentiality and integrity impacts with no availability impact. A fix is available in version 4.1.6-r1.