logo

Database

Weak credential policy In github.com/argoproj/argo-workflows

Description

Argo Workflow may expose artifact repository credentials in github.com/argoproj/argo-workflows Argo Workflow may expose artifact repository credentials in github.com/argoproj/argo-workflows

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2025-621572. NVD-2025-621573. OSV-GO-2025-40244. OSV-2025-621575. GHSA-c2hv-4pfj-mm2r6. GCVE-2025-621577. GHSA-c2hv-4pfj-mm2r

References

1. https://github.com/argoproj/argo-workflows/commit/18ad5138b6bcb2aba04e00b4ec657bc6b8fad8df2. https://github.com/argoproj/argo-workflows/commit/bded09fe4abd37cb98d7fc81b4c14a6f5034e9ab3. https://github.com/argoproj/argo-workflows/security/advisories/GHSA-c2hv-4pfj-mm2r4. https://pkg.go.dev/vuln/GO-2025-4024

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.