logo

Database

Lack of data validation In github.com/argoproj/argo-workflows

Description

Workflow re-write vulnerability using input parameter in github.com/argoproj/argo-workflows Workflow re-write vulnerability using input parameter in github.com/argoproj/argo-workflows

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2021-379142. NVD-2021-379143. OSV-GO-2022-09284. OSV-2021-379145. GHSA-h563-xh25-x54q6. GCVE-2021-379147. GHSA-h563-xh25-x54q

References

1. https://github.com/argoproj/argo-workflows/commit/2a2ecc916925642fd8cb1efd026588e6828f82e12. https://github.com/argoproj/argo-workflows/pull/62853. https://github.com/argoproj/argo-workflows/pull/64424. https://github.com/argoproj/argo-workflows/issues/64415. https://github.com/argoproj/argo-workflows/security/advisories/GHSA-h563-xh25-x54q

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.