Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Argo Workflows, npm, Renovate could let attackers bypass protections
published 1 month ago
Summary
The Argo Workflows, npm, and Renovate packages from cleanstart contain a flaw that could allow an attacker to get around built‑in security checks. This could let malicious code run or data be accessed without permission. Updating each package to the latest version fixes the issue, so apply the newest releases as soon as possible.
What to do
- Update cleanstart argo-workflows to version 3.6.19-r8.
- Update cleanstart npm to version 11.7.0-r0.
- Update cleanstart renovate to version 43.4.4-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | argo-workflows |
< 3.6.19-r8 Fix: upgrade to 3.6.19-r8
|
| CleanStart | cleanstart | npm |
< 11.7.0-r0 Fix: upgrade to 11.7.0-r0
|
| CleanStart | cleanstart | renovate |
< 43.4.4-r0 Fix: upgrade to 43.4.4-r0
|
Original advisory text
Security fix for CVE-2026-24001 applied in: argo-workflows 3.6.19-r8, npm 11.7.0-r0, renovate 43.4.4-r0
CVE-2026-24001 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.
Timeline
Published18 Sep 2026
Updated18 Sep 2026
First seen18 Sep 2026
Sources
CLEANSTART-2026-JK65997 · OSV
Track software like this
Free during beta