tocsin

Go/github.com/argoproj/argo-workflows/v3 CVE-2024-53862: high 7.5, EPSS 0.66%

Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode in github.com/argoproj/argo-workflows

Action: Upgrade github.com/argoproj/argo-workflows/v3 to 3.5.13 or later.

go get github.com/argoproj/argo-workflows/v3@v3.5.13
go get github.com/argoproj/argo-workflows/v3@v3.6.2

Affected

introducedfixedlast affected
3.5.73.5.13-
3.6.0-rc13.6.2-

Fixed versions

3.5.133.6.2

Sources

CVE-2024-53862 · published · modified · JSON