Go/github.com/argoproj/argo-workflows CVE-2024-53862: high 7.5, EPSS 0.66%
Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode in github.com/argoproj/argo-workflows
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2024-3303
- nvd: CVE-2024-53862
- https://github.com/argoproj/argo-workflows/pull/13021/files#diff-a5b255abaceddc9cc20bf6da6ae92c3a5d3605d94366af503ed754c079a1171aL668-R715
- https://github.com/argoproj/argo-workflows/security/advisories/GHSA-h36c-m3rf-34h9
CVE-2024-53862 · published · modified · JSON