GO-2022-0388: Argo Server TLS requests could be forged by attacker with network access in github.com/argoproj/argo-workflows

  GO-2022-0405: Potential privilege escalation on Kubernetes >= v1.19 when the Argo Sever is run with `--auth-mode=client` in github.com/argoproj/argo-workflows

  GO-2025-4023: Argo Workflow has a Zipslip Vulnerability in github.com/argoproj/argo-workflows

  GO-2025-4024: Argo Workflow may expose artifact repository credentials in github.com/argoproj/argo-workflows

  GO-2025-4223: RCE via ZipSlip and symbolic links in argoproj/argo-workflows in github.com/argoproj/argo-workflows

  GO-2026-4350: Argo Workflows affected by stored XSS in the artifact directory listing in github.com/argoproj/argo-workflows

  GO-2026-4678: Unauthorized access to Argo Workflows Template in github.com/argoproj/argo-workflows

  GO-2026-4681: Argo Workflows: WorkflowTemplate Security Bypass via podSpecPatch in Strict/Secure Reference Mode in github.com/argoproj/argo-workflows

  GO-2026-5072: Argo has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure in github.com/argoproj/argo-workflows

  GO-2026-5235: Argo vulnerable to exposure of artifact repository credentials in github.com/argoproj/argo-workflows

  GO-2026-5462: Argo Vulnerable to Unauthenticated Memory Exhaustion (DoS) in Webhook Interceptor in github.com/argoproj/argo-workflows

  GO-2026-5527: Argo Affected by SSO RBAC Delegation Nil Pointer Dereference DoS (gatekeeper.go) in github.com/argoproj/argo-workflows

  GO-2026-5751: Argo has Missing Authorization in its Sync ConfigMap Provider in github.com/argoproj/argo-workflows

  GO-2026-6223: Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list (Incomplete fix for CVE-2026-31892) in github.com/argoproj/argo-workflows