pkg:Go/github.com/argoproj/argo-workflows

All known vulnerabilities

• HIGH8.1CVE-2025-66626argoproj/argo-workflows is vulnerable to RCE via ZipSlip and symbolic links
  from 0, <= 2.5.3-rc4
• HIGH8.1CVE-2025-66626argoproj/argo-workflows is vulnerable to RCE via ZipSlip and symbolic links
  from 0
• HIGH8.1CVE-2025-62156argo-workflows Zip Slip path traversal allows arbitrary file write and container configuration overwrite
  from 0
• MEDIUM6.5Workflow re-write vulnerability using input parameter in github.com/argoproj/argo-workflows
  from 0
• MEDIUM5.7Argo Workflows Controller: Denial of Service via malicious daemon Workflows in github.com/argoproj/argo-workflows
  from 0
• —Argo Workflows: Exposure of artifact repository credentials
  from 0
• —Argo Workflows: SSO RBAC Delegation Nil Pointer Dereference DoS (gatekeeper.go)
  from 0
• —Argo Workflows exposes artifact repository credentials in workflow-controller logs
  from 0
• —Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode
  from 0