A high-severity security vulnerability (CVE-2026-24001) affects the argo-workflows package due to an issue in the jsdiff JavaScript text differencing implementation. The vulnerability impacts availability but does not affect confidentiality or integrity. Fixed versions 4.1.6-r1 and 4.0.15-r2 are available.