Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
Argo Workflows may misinterpret email display names
published 5 days ago
Summary
The Argo Workflows software has a bug in its address‑parsing routine that mishandles text placed in parentheses inside a display name. This can cause the system to read the address incorrectly, potentially leading to delivery or routing errors. Update to the latest version of Argo Workflows or apply the provided patch to fix the parsing logic.
What to do
- Update cleanstart argo-workflows to version 3.6.19-r5.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | argo-workflows |
< 3.6.19-r5 Fix: upgrade to 3.6.19-r5
|
Original advisory text
ParseAddressList function incorrectly handles comments (text within parentheses) within display names
Security vulnerability affects the argo-workflows package. The ParseAddressList function incorrectly handles comments (text within parentheses) within display names.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published30 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2026-ZO54380 · OSV
Track software like this
Free during beta