argo-workflow-executor-compat-3.6 vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the argo-workflow-executor-compat-3.6 package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
C Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	*
H Improper Validation of Array Index	*
L Improper Authorization	*
L GHSA-jqcq-xjh3-6g23	*
L Uncontrolled Recursion	*
H Incorrect Authorization	*
H Incorrect Authorization	*
L CVE-2026-25679	*
L CVE-2026-27139	*
L CVE-2026-27142	*
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	*
L CVE-2026-3449	*
H CVE-2025-15558	*
L GHSA-5c6j-r48x-rmvq	*
L Untrusted Search Path	*
L Inefficient Regular Expression Complexity	*
L Algorithmic Complexity	*
C CVE-2026-1229	*
H Inefficient Regular Expression Complexity	*
L Inefficient Regular Expression Complexity	*
H CVE-2026-2391	*
L CVE-2025-50537	*
L CVE-2025-61732	<3.6.18-r1
C CVE-2025-68121	<3.6.18-r1
M Improper Validation of Integrity Check Value	<3.6.18-r2
L Server-Side Request Forgery (SSRF)	<3.6.15-r1
L Server-Side Request Forgery (SSRF)	<3.6.15-r1
L Allocation of Resources Without Limits or Throttling	<3.6.17-r0
M CVE-2025-13465	<3.6.18-r0
L Allocation of Resources Without Limits or Throttling	<3.6.17-r0
L CVE-2025-61730	<3.6.17-r0
L Out-of-bounds Write	<3.6.17-r0
L CVE-2025-61731	<3.6.17-r0
M Cross-site Scripting (XSS)	<3.6.17-r0
H Resource Exhaustion	<3.6.17-r0
L CVE-2025-15284	<3.6.15-r1
L Allocation of Resources Without Limits or Throttling	<3.6.15-r1
H Link Following	<3.6.14-r0
L Improper Certificate Validation	<3.6.13-r2
L Improper Certificate Validation	<3.6.13-r2
L CVE-2025-12816	<3.6.13-r2
M Integer Overflow or Wraparound	<3.6.13-r2
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
H Uncontrolled Recursion	<3.6.13-r2
L CVE-2025-58181	<3.6.13-r1
L CVE-2025-47914	<3.6.13-r1
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<3.6.13-r0
L CVE-2025-47912	<3.6.12-r0
L Allocation of Resources Without Limits or Throttling	<3.6.12-r0
L CVE-2025-61725	<3.6.12-r0
L Allocation of Resources Without Limits or Throttling	<3.6.12-r0
L CVE-2025-58183	<3.6.12-r0
L CVE-2025-58186	<3.6.12-r0
L Allocation of Resources Without Limits or Throttling	<3.6.12-r0
L Information Exposure Through Log Files	<3.6.12-r0
L Improper Certificate Validation	<3.6.12-r0
L Algorithmic Complexity	<3.6.12-r0
M Insufficiently Protected Credentials	<3.6.12-r0
H Directory Traversal	<3.6.12-r0
L CVE-2025-47910	<3.6.11-r0
L GHSA-2464-8j7c-4cjm	<3.6.10-r2
L GHSA-fv92-fjc5-jj9h	<3.6.10-r1
L Improper Validation of Specified Type of Input	<3.6.10-r1

argo-workflow-executor-compat-3.6 vulnerabilities

Direct Vulnerabilities

Fix vulnerabilities automatically