Affected by GO-2026-5148 and 3 other vulnerabilities

GO-2026-5148: Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows Controller in github.com/argoproj/argo-workflows

GO-2026-5235: Argo vulnerable to exposure of artifact repository credentials in github.com/argoproj/argo-workflows

GO-2026-5527: Argo Affected by SSO RBAC Delegation Nil Pointer Dereference DoS (gatekeeper.go) in github.com/argoproj/argo-workflows

GO-2026-5751: Argo has Missing Authorization in its Sync ConfigMap Provider in github.com/argoproj/argo-workflows

The highest tagged major version is v4.

workflow/

Details

Path	Synopsis
artifactrepositories
mocks
artifacts
azure
common
gcs
git
hdfs
http
logging
oss
raw
resource
s3
common
controller
cache
entrypoint
estimation
indexes
informer
pod Package pod implements pod life cycle management	Package pod implements pod life cycle management
convert Package convert contains functions to convert between different versions of Argo Workflows objects.	Package convert contains functions to convert between different versions of Argo Workflows objects.
creator
cron
data
events
executor
common
emissary
mocks
osspecific
plugins/rpc
retry
gccontroller
hydrator
fake
metrics
packer
progress
signal
sync
mocks
templateresolution
util
plugins
retry
validate