Threats tagged 'cleanstart-2026-km32338'

A critical security vulnerability (CVE-2026-90711) affects the argo-workflows package due to an issue with the proxy-addr component in Node.js. The flaw allows for network-based exploitation without requiring privileges or user interaction, resulting in high confidentiality and integrity impact. Fixed versions 4.1.6-r1 and 4.0.15-r2 address this vulnerability.