github.com/argoproj/argo-workflows/v4
Workflow Engine for Kubernetes
View on Github
Activity
- Latest release
- 1w ago
- Total releases
- 23
- Cadence
- ~6 days
- Last 12 months
- 23
Reach
- Stars
- 17.1k
Details
- First release
- Mar 11, 2026
| Version | Released | |
|---|---|---|
v4.0.15
patch
|
v4.0.15
patch
Dependencies (95)
+ 87 more |
|
v4.0.14
patch
|
v4.0.14
patch
Dependencies (95)
+ 87 more |
|
v4.1.6
patch
|
v4.1.6
patch
Dependencies (110)
+ 102 more |
|
v4.1.5
patch
|
v4.1.5
patch
Dependencies (110)
+ 102 more |
|
v4.0.13
patch
|
v4.0.13
patch
Dependencies (96)
+ 88 more |
|
v4.1.4
patch
|
v4.1.4
patch
Dependencies (110)
+ 102 more |
|
v4.0.12
patch
|
v4.0.12
patch
Dependencies (96)
+ 88 more |
|
v4.0.11
patch
|
v4.0.11
patch
Dependencies (96)
+ 88 more |
|
v4.1.3
patch
|
v4.1.3
patch
Dependencies (110)
+ 102 more |
|
v4.1.2
patch
|
v4.1.2
patch
Dependencies (110)
+ 102 more |
|
v4.0.10
patch
|
v4.0.10
patch
Dependencies (96)
+ 88 more |
|
v4.0.9
patch
|
v4.0.9
patch
Dependencies (95)
+ 87 more |
|
v4.1.1
patch
|
v4.1.1
patch
Dependencies (110)
+ 102 more |
|
v4.1.0
minor
|
v4.1.0
minor
Dependencies (110)
+ 102 more |
|
v4.1.0-rc2
pre
|
v4.1.0-rc2
pre
Dependencies (110)
+ 102 more |
|
v4.1.0-rc1
pre
|
v4.1.0-rc1
pre
Dependencies (110)
+ 102 more |
|
v4.0.8
patch
|
v4.0.8
patch
Dependencies (95)
+ 87 more |
|
v4.0.7
patch
|
v4.0.7
patch
Dependencies (95)
+ 87 more |
|
v4.0.6
patch
|
v4.0.6
patch
Dependencies (95)
+ 87 more |
|
v4.0.5
patch
1 CVE
CVE-2026-54526
GO-2026-6223
BIT-argo-workflows-2026-54526
GHSA-48p8-g2fx-3wwm
Aug 18, 2026
Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list (Incomplete fix for CVE-2026-31892) in github.com/argoproj/argo-workflows Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list (Incomplete fix for CVE-2026-31892) in github.com/argoproj/argo-workflows Fixed in
4.0.6
References
Updated Aug 18, 2026 · Source: OSV.dev |
v4.0.5
patch
Dependencies (95)
+ 87 more |
|
v4.0.4
patch
7 CVEs
CVE-2026-54526
GO-2026-6223
BIT-argo-workflows-2026-54526
GHSA-48p8-g2fx-3wwm
Aug 18, 2026
Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list (Incomplete fix for CVE-2026-31892) in github.com/argoproj/argo-workflows Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list (Incomplete fix for CVE-2026-31892) in github.com/argoproj/argo-workflows Fixed in
4.0.6
References
Updated Aug 18, 2026 · Source: OSV.dev
CVE-2026-42297
GO-2026-5751
BIT-argo-workflows-2026-42297
GHSA-xchc-cqwg-g76q
Jun 25, 2026
Argo has Missing Authorization in its Sync ConfigMap Provider in github.com/argoproj/argo-workflows Argo has Missing Authorization in its Sync ConfigMap Provider in github.com/argoproj/argo-workflows Fixed in
4.0.5
References Updated Jul 02, 2026 · Source: OSV.dev
CVE-2026-42183
GO-2026-5527
BIT-argo-workflows-2026-42183
GHSA-p4gq-3vxj-f4jq
Jun 25, 2026
Argo Affected by SSO RBAC Delegation Nil Pointer Dereference DoS (gatekeeper.go) in github.com/argoproj/argo-workflows Argo Affected by SSO RBAC Delegation Nil Pointer Dereference DoS (gatekeeper.go) in github.com/argoproj/argo-workflows Fixed in
4.0.5
References Updated Jul 02, 2026 · Source: OSV.dev
CVE-2026-42294
GO-2026-5462
BIT-argo-workflows-2026-42294
GHSA-jcc8-g2q4-9fxq
Jun 25, 2026
Argo Vulnerable to Unauthenticated Memory Exhaustion (DoS) in Webhook Interceptor in github.com/argoproj/argo-workflows Argo Vulnerable to Unauthenticated Memory Exhaustion (DoS) in Webhook Interceptor in github.com/argoproj/argo-workflows Fixed in
4.0.5
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-42295
GO-2026-5235
BIT-argo-workflows-2026-42295
GHSA-7vf8-2cr6-54mf
Jun 25, 2026
Argo vulnerable to exposure of artifact repository credentials in github.com/argoproj/argo-workflows Argo vulnerable to exposure of artifact repository credentials in github.com/argoproj/argo-workflows Fixed in
4.0.5
References
Updated Jul 02, 2026 · Source: OSV.dev
CVE-2026-42296
GO-2026-5072
BIT-argo-workflows-2026-42296
GHSA-3775-99mw-8rp4
Jun 25, 2026
Argo has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure in github.com/argoproj/argo-workflows Argo has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure in github.com/argoproj/argo-workflows Fixed in
4.0.5
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-40886
GO-2026-5148
BIT-argo-workflows-2026-40886
GHSA-5jv8-h7qh-rf5p
Jun 25, 2026
Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows Controller in github.com/argoproj/argo-workflows Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows Controller in github.com/argoproj/argo-workflows Fixed in
4.0.5
References Updated Jun 26, 2026 · Source: OSV.dev |
v4.0.4
patch
Dependencies (95)
+ 87 more |
|
v4.0.3
patch
7 CVEs
CVE-2026-54526
GO-2026-6223
BIT-argo-workflows-2026-54526
GHSA-48p8-g2fx-3wwm
Aug 18, 2026
Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list (Incomplete fix for CVE-2026-31892) in github.com/argoproj/argo-workflows Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list (Incomplete fix for CVE-2026-31892) in github.com/argoproj/argo-workflows Fixed in
4.0.6
References
Updated Aug 18, 2026 · Source: OSV.dev
CVE-2026-42297
GO-2026-5751
BIT-argo-workflows-2026-42297
GHSA-xchc-cqwg-g76q
Jun 25, 2026
Argo has Missing Authorization in its Sync ConfigMap Provider in github.com/argoproj/argo-workflows Argo has Missing Authorization in its Sync ConfigMap Provider in github.com/argoproj/argo-workflows Fixed in
4.0.5
References Updated Jul 02, 2026 · Source: OSV.dev
CVE-2026-42183
GO-2026-5527
BIT-argo-workflows-2026-42183
GHSA-p4gq-3vxj-f4jq
Jun 25, 2026
Argo Affected by SSO RBAC Delegation Nil Pointer Dereference DoS (gatekeeper.go) in github.com/argoproj/argo-workflows Argo Affected by SSO RBAC Delegation Nil Pointer Dereference DoS (gatekeeper.go) in github.com/argoproj/argo-workflows Fixed in
4.0.5
References Updated Jul 02, 2026 · Source: OSV.dev
CVE-2026-42294
GO-2026-5462
BIT-argo-workflows-2026-42294
GHSA-jcc8-g2q4-9fxq
Jun 25, 2026
Argo Vulnerable to Unauthenticated Memory Exhaustion (DoS) in Webhook Interceptor in github.com/argoproj/argo-workflows Argo Vulnerable to Unauthenticated Memory Exhaustion (DoS) in Webhook Interceptor in github.com/argoproj/argo-workflows Fixed in
4.0.5
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-42295
GO-2026-5235
BIT-argo-workflows-2026-42295
GHSA-7vf8-2cr6-54mf
Jun 25, 2026
Argo vulnerable to exposure of artifact repository credentials in github.com/argoproj/argo-workflows Argo vulnerable to exposure of artifact repository credentials in github.com/argoproj/argo-workflows Fixed in
4.0.5
References
Updated Jul 02, 2026 · Source: OSV.dev
CVE-2026-42296
GO-2026-5072
BIT-argo-workflows-2026-42296
GHSA-3775-99mw-8rp4
Jun 25, 2026
Argo has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure in github.com/argoproj/argo-workflows Argo has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure in github.com/argoproj/argo-workflows Fixed in
4.0.5
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-40886
GO-2026-5148
BIT-argo-workflows-2026-40886
GHSA-5jv8-h7qh-rf5p
Jun 25, 2026
Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows Controller in github.com/argoproj/argo-workflows Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows Controller in github.com/argoproj/argo-workflows Fixed in
4.0.5
References Updated Jun 26, 2026 · Source: OSV.dev |
v4.0.3
patch
Dependencies (95)
+ 87 more |
|
v4.0.2
initial
7 CVEs
CVE-2026-54526
GO-2026-6223
BIT-argo-workflows-2026-54526
GHSA-48p8-g2fx-3wwm
Aug 18, 2026
Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list (Incomplete fix for CVE-2026-31892) in github.com/argoproj/argo-workflows Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list (Incomplete fix for CVE-2026-31892) in github.com/argoproj/argo-workflows Fixed in
4.0.6
References
Updated Aug 18, 2026 · Source: OSV.dev
CVE-2026-42297
GO-2026-5751
BIT-argo-workflows-2026-42297
GHSA-xchc-cqwg-g76q
Jun 25, 2026
Argo has Missing Authorization in its Sync ConfigMap Provider in github.com/argoproj/argo-workflows Argo has Missing Authorization in its Sync ConfigMap Provider in github.com/argoproj/argo-workflows Fixed in
4.0.5
References Updated Jul 02, 2026 · Source: OSV.dev
CVE-2026-42183
GO-2026-5527
BIT-argo-workflows-2026-42183
GHSA-p4gq-3vxj-f4jq
Jun 25, 2026
Argo Affected by SSO RBAC Delegation Nil Pointer Dereference DoS (gatekeeper.go) in github.com/argoproj/argo-workflows Argo Affected by SSO RBAC Delegation Nil Pointer Dereference DoS (gatekeeper.go) in github.com/argoproj/argo-workflows Fixed in
4.0.5
References Updated Jul 02, 2026 · Source: OSV.dev
CVE-2026-42294
GO-2026-5462
BIT-argo-workflows-2026-42294
GHSA-jcc8-g2q4-9fxq
Jun 25, 2026
Argo Vulnerable to Unauthenticated Memory Exhaustion (DoS) in Webhook Interceptor in github.com/argoproj/argo-workflows Argo Vulnerable to Unauthenticated Memory Exhaustion (DoS) in Webhook Interceptor in github.com/argoproj/argo-workflows Fixed in
4.0.5
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-42295
GO-2026-5235
BIT-argo-workflows-2026-42295
GHSA-7vf8-2cr6-54mf
Jun 25, 2026
Argo vulnerable to exposure of artifact repository credentials in github.com/argoproj/argo-workflows Argo vulnerable to exposure of artifact repository credentials in github.com/argoproj/argo-workflows Fixed in
4.0.5
References
Updated Jul 02, 2026 · Source: OSV.dev
CVE-2026-42296
GO-2026-5072
BIT-argo-workflows-2026-42296
GHSA-3775-99mw-8rp4
Jun 25, 2026
Argo has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure in github.com/argoproj/argo-workflows Argo has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure in github.com/argoproj/argo-workflows Fixed in
4.0.5
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-40886
GO-2026-5148
BIT-argo-workflows-2026-40886
GHSA-5jv8-h7qh-rf5p
Jun 25, 2026
Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows Controller in github.com/argoproj/argo-workflows Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows Controller in github.com/argoproj/argo-workflows Fixed in
4.0.5
References Updated Jun 26, 2026 · Source: OSV.dev |
v4.0.2
initial
Dependencies (95)
+ 87 more |