A high-severity security vulnerability (CVE-2026-48779) affects the argo-workflows package, which uses the ws WebSocket client and server for Node.js. The vulnerability impacts versions prior to 4.1.6-r1 and 4.0.15-r2. It has a CVSS score of 7.5 with an impact on availability. Fixed versions 4.1.6-r1 and 4.0.15-r2 are available.