go package reportIs github.com/argoproj/argo-workflows/v2 safe?
6 known vulnerabilities.
// reach0 direct dependencies
none carry a known advisory
0 packages depend on it
an advisory here reaches each of them
// ai model usageTracked for PyPI packages. HuggingFace models declare Python dependencies, so go packages are not covered.
epsschance of exploitation in 30 days, 44th percentile of all CVEs
xyz scoreCyberXYZ composite out of 10
fig. 01 — GHSA-48p8-g2fx-3wwm, the advisory selected below
// 6 advisories
Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list (Incomplete fix for CVE-2026-31892) in github.com/argoproj/argo-workflows
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:H
- Attack vector
- Network
- Attack complexity
- Low
- Attack requirements
- Present
- Privileges required
- Low
- User interaction
- None
- Confidentiality (vulnerable system)
- High
- Integrity (vulnerable system)
- High
- Availability (vulnerable system)
- None
- Confidentiality (subsequent systems)
- High
- Integrity (subsequent systems)
- High
- Availability (subsequent systems)
- High
Checked 2026-10-01 at 00:04 UTC. The most recent advisory here was published 2026-08-18. Updated continuously from NVD, GHSA, OSV and CNA feeds.