Threats tagged 'cleanstart-2026-ov74221'

A high-severity security vulnerability exists in the argo-workflows package where the shell-quote library's quote() function fails to properly validate object-token inputs against the operator model used by the parse() function. This flaw affects versions prior to 4.1.6-r1 and 4.0.15-r2. The vulnerability has been assigned CVE-2026-9277 and has a CVSS score of 8.1, indicating a significant risk. Fixed versions 4.1.6-r1 and 4.0.15-r2 have been released to address this issue.