A medium severity security vulnerability (CVE-2026-86472) affects the argo-workflows package through its fast-uri component, a dependency-free RFC 3986 URI parser for Node.js. Versions prior to 4.1.6-r1 are affected. The vulnerability has a CVSS score of 4.8, indicating limited impact on confidentiality and integrity with no availability impact. A fix is available in version 4.1.6-r1.