Affected by GO-2025-4223
and 10 other vulnerabilities
GO-2025-4223: RCE via ZipSlip and symbolic links in argoproj/argo-workflows in github.com/argoproj/argo-workflows
GO-2026-4350: Argo Workflows affected by stored XSS in the artifact directory listing in github.com/argoproj/argo-workflows
GO-2026-4678: Unauthorized access to Argo Workflows Template in github.com/argoproj/argo-workflows
GO-2026-4681: Argo Workflows: WorkflowTemplate Security Bypass via podSpecPatch in Strict/Secure Reference Mode in github.com/argoproj/argo-workflows
GO-2026-5072: Argo has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure in github.com/argoproj/argo-workflows
GO-2026-5148: Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows Controller in github.com/argoproj/argo-workflows
GO-2026-5148: Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows Controller in github.com/argoproj/argo-workflows
GO-2026-5235: Argo vulnerable to exposure of artifact repository credentials in github.com/argoproj/argo-workflows
GO-2026-5462: Argo Vulnerable to Unauthenticated Memory Exhaustion (DoS) in Webhook Interceptor in github.com/argoproj/argo-workflows
GO-2026-5527: Argo Affected by SSO RBAC Delegation Nil Pointer Dereference DoS (gatekeeper.go) in github.com/argoproj/argo-workflows
GO-2026-5751: Argo has Missing Authorization in its Sync ConfigMap Provider in github.com/argoproj/argo-workflows
type Interface interface {
// whether or not the workflow in hydrated IsHydrated(wf *wfv1.Workflow) bool// hydrate the workflow - doing nothing if it is already hydrated Hydrate(wf *wfv1.Workflow) error// dehydrate the workflow - doing nothing if already dehydrated Dehydrate(wf *wfv1.Workflow) error// hydrate the workflow using the provided nodes HydrateWithNodes(wf *wfv1.Workflow, nodes wfv1.Nodes)
}