A high-severity security vulnerability (CVE-2024-4068) affects the argo-workflows package due to the use of the NPM package 'braces' in versions prior to 3. This vulnerability impacts argo-workflows versions before 4.0.15-r2 and 4.1.6-r1. The flaw does not affect confidentiality or integrity but causes a significant availability impact. A patch is available in versions 4.0.15-r2 and 4.1.6-r1.