Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
Argo Workflows decoder can be triggered improperly
published 5 days ago
Summary
The argo-workflows software includes a function that can be called in an unintended way, allowing an attacker to cause the program to behave incorrectly. This could lead to unauthorized actions or data exposure within your workflow system. Upgrade to the newest argo-workflows release or apply the vendor’s patch to stop the unsafe call.
What to do
- Update cleanstart argo-workflows to version 3.6.19-r5.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | argo-workflows |
< 3.6.19-r5 Fix: upgrade to 3.6.19-r5
|
Original advisory text
Calling Decoder
Security vulnerability affects the argo-workflows package. Calling Decoder.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published30 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2026-RR59583 · OSV
Track software like this
Free during beta