VDB

GO-2024-3303

GO-2024-3303 PUBLISHED

Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode in github.com/argoproj/argo-workflows

Affected Products

VendorProductVersions
github.comargoproj/argo-workflows0, 0
github.comargoproj/argo-workflows/v33.6.0-rc1, 3.6.0-rc1, 3.5.7
github.comargoproj/argo-workflows/v20, 0

Timeline

  • Dec 2, 2024 CVE Published
  • Feb 4, 2026 CVE Updated
  • May 1, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›