tocsin

Go/github.com/argoproj/argo-workflows/v3 CVE-2025-62157: medium 6.5, EPSS 0.47%

Argo Workflow may expose artifact repository credentials in github.com/argoproj/argo-workflows

Action: Upgrade github.com/argoproj/argo-workflows/v3 to 3.6.12 or later.

go get github.com/argoproj/argo-workflows/v3@v3.6.12
go get github.com/argoproj/argo-workflows/v3@v3.7.3

Affected

introducedfixedlast affected
03.6.12-
3.7.03.7.3-

Fixed versions

3.6.123.7.3

Sources

CVE-2025-62157 · published · modified · JSON