CVE-2026-54526

7 advisories.

Go/github.com/argoproj/argo-workflows/v4 CVE-2026-54526: high

Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list (Incomplete fix for CVE-2026-31892)

Action: Upgrade github.com/argoproj/argo-workflows/v4 to 4.0.6 or later.

go get github.com/argoproj/argo-workflows/v4@v4.0.6

Affected

introduced	fixed	last affected
4.0.0	4.0.6	-

Fixed versions

4.0.6

Sources

CVE-2026-54526 · published 2026-08-13T14:16:09Z · modified 2026-09-10T03:51:13.104505523Z · JSON

Go/github.com/argoproj/argo-workflows/v3 CVE-2026-54526: high

Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list (Incomplete fix for CVE-2026-31892)

Action: Upgrade github.com/argoproj/argo-workflows/v3 to 3.7.15 or later.

go get github.com/argoproj/argo-workflows/v3@v3.7.15

Affected

introduced	fixed	last affected
0	3.7.15	-

Fixed versions

3.7.15

Sources

CVE-2026-54526 · published 2026-08-13T14:16:09Z · modified 2026-09-10T03:51:13.104505523Z · JSON

Go/github.com/argoproj/argo-workflows CVE-2026-54526: high

Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list (Incomplete fix for CVE-2026-31892)

Action: No fix published. Pin and monitor.

Affected

introduced	fixed	last affected
0	-	2.5.3-rc4

Fixed versions

No fixed version in the source.

Sources

CVE-2026-54526 · published 2026-08-13T14:16:09Z · modified 2026-09-10T03:51:13.104505523Z · JSON

Go/github.com/argoproj/argo-workflows CVE-2026-54526: unknown

Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list (Incomplete fix for CVE-2026-31892) in github.com/argoproj/argo-workflows

Action: No fix published. Pin and monitor.

Affected

introduced	fixed	last affected
0	-	-

Fixed versions

No fixed version in the source.

Sources

CVE-2026-54526 · published 2026-08-18T14:32:29Z · modified 2026-08-18T14:56:00.633429488Z · JSON

Go/github.com/argoproj/argo-workflows/v2 CVE-2026-54526: unknown

Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list (Incomplete fix for CVE-2026-31892) in github.com/argoproj/argo-workflows

Action: No fix published. Pin and monitor.

Affected

introduced	fixed	last affected
0	-	-

Fixed versions

No fixed version in the source.

Sources

CVE-2026-54526 · published 2026-08-18T14:32:29Z · modified 2026-08-18T14:56:00.633429488Z · JSON

Go/github.com/argoproj/argo-workflows/v3 CVE-2026-54526: unknown

Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list (Incomplete fix for CVE-2026-31892) in github.com/argoproj/argo-workflows

Action: Upgrade github.com/argoproj/argo-workflows/v3 to 3.7.15 or later.

go get github.com/argoproj/argo-workflows/v3@v3.7.15

Affected

introduced	fixed	last affected
0	3.7.15	-

Fixed versions

3.7.15

Sources

CVE-2026-54526 · published 2026-08-18T14:32:29Z · modified 2026-08-18T14:56:00.633429488Z · JSON

Go/github.com/argoproj/argo-workflows/v4 CVE-2026-54526: unknown

Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list (Incomplete fix for CVE-2026-31892) in github.com/argoproj/argo-workflows

Action: Upgrade github.com/argoproj/argo-workflows/v4 to 4.0.6 or later.

go get github.com/argoproj/argo-workflows/v4@v4.0.6

Affected

introduced	fixed	last affected
4.0.0	4.0.6	-

Fixed versions

4.0.6

Sources

CVE-2026-54526 · published 2026-08-18T14:32:29Z · modified 2026-08-18T14:56:00.633429488Z · JSON