A security vulnerability has been identified in the argo-workflows package due to its use of the js-yaml JavaScript YAML parser and dumper. The vulnerability affects versions prior to 4.1.6-r1 and 4.0.15-r2. It has a CVSS 3.1 base score of 5.3, indicating a medium severity level. The vulnerability does not impact confidentiality or integrity but can cause availability issues. A patch is available in versions 4.1.6-r1 and 4.0.15-r2.