Affected by GO-2022-0388
and 16 other vulnerabilities
GO-2022-0388: Argo Server TLS requests could be forged by attacker with network access in github.com/argoproj/argo-workflows
GO-2022-0405: Potential privilege escalation on Kubernetes >= v1.19 when the Argo Sever is run with `--auth-mode=client` in github.com/argoproj/argo-workflows
GO-2022-0928: Workflow re-write vulnerability using input parameter in github.com/argoproj/argo-workflows
GO-2024-3226: Argo Workflows Controller: Denial of Service via malicious daemon Workflows in github.com/argoproj/argo-workflows
GO-2024-3303: Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode in github.com/argoproj/argo-workflows
GO-2025-4023: Argo Workflow has a Zipslip Vulnerability in github.com/argoproj/argo-workflows
GO-2025-4024: Argo Workflow may expose artifact repository credentials in github.com/argoproj/argo-workflows
GO-2025-4223: RCE via ZipSlip and symbolic links in argoproj/argo-workflows in github.com/argoproj/argo-workflows
GO-2026-4350: Argo Workflows affected by stored XSS in the artifact directory listing in github.com/argoproj/argo-workflows
GO-2026-4678: Unauthorized access to Argo Workflows Template in github.com/argoproj/argo-workflows
GO-2026-4681: Argo Workflows: WorkflowTemplate Security Bypass via podSpecPatch in Strict/Secure Reference Mode in github.com/argoproj/argo-workflows
GO-2026-5072: Argo has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure in github.com/argoproj/argo-workflows
GO-2026-5148: Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows Controller in github.com/argoproj/argo-workflows
GO-2026-5235: Argo vulnerable to exposure of artifact repository credentials in github.com/argoproj/argo-workflows
GO-2026-5462: Argo Vulnerable to Unauthenticated Memory Exhaustion (DoS) in Webhook Interceptor in github.com/argoproj/argo-workflows
GO-2026-5527: Argo Affected by SSO RBAC Delegation Nil Pointer Dereference DoS (gatekeeper.go) in github.com/argoproj/argo-workflows
GO-2026-5751: Argo has Missing Authorization in its Sync ConfigMap Provider in github.com/argoproj/argo-workflows
NewFilteredUnstructuredInformer constructs a new informer for Unstructured type.
Always prefer using an informer factory to get a shared informer instead of getting an independent
one. This reduces memory footprint and number of connections to the server.
NewUnstructuredInformer constructs a new informer for Unstructured type.
Always prefer using an informer factory to get a shared informer instead of getting an independent
one. This reduces memory footprint and number of connections to the server.
Affected by 
The highest tagged major version is
Documentation
¶
Source Files