CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-23960

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Prior to versions 3.6.17 and 3.7.8, stored XSS in the artifact directory listing allows any workflow author to execute arbitrary JavaScript in another user’s browser under the Argo Server origin, enabling API actions with the victim’s privileges. Versions 3.6.17 and 3.7.8 fix the issue.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 17.3%

CVSS Severity

CVSS v3 Score 5.4

References

Products affected by CVE-2026-23960

Argoproj » Argo Workflows » Version: 0.1.0

cpe:2.3:a:argoproj:argo_workflows:0.1.0
Argoproj » Argo Workflows » Version: 0.2.0

cpe:2.3:a:argoproj:argo_workflows:0.2.0
Argoproj » Argo Workflows » Version: 0.3.0

cpe:2.3:a:argoproj:argo_workflows:0.3.0
Argoproj » Argo Workflows » Version: 0.3.1

cpe:2.3:a:argoproj:argo_workflows:0.3.1
Argoproj » Argo Workflows » Version: 0.3.2

cpe:2.3:a:argoproj:argo_workflows:0.3.2
Argoproj » Argo Workflows » Version: 0.3.3

cpe:2.3:a:argoproj:argo_workflows:0.3.3
Argoproj » Argo Workflows » Version: 0.4.0

cpe:2.3:a:argoproj:argo_workflows:0.4.0
Argoproj » Argo Workflows » Version: 0.4.1

cpe:2.3:a:argoproj:argo_workflows:0.4.1
Argoproj » Argo Workflows » Version: 0.4.2

cpe:2.3:a:argoproj:argo_workflows:0.4.2
Argoproj » Argo Workflows » Version: 0.4.3

cpe:2.3:a:argoproj:argo_workflows:0.4.3
Argoproj » Argo Workflows » Version: 0.4.4

cpe:2.3:a:argoproj:argo_workflows:0.4.4
Argoproj » Argo Workflows » Version: 0.4.5

cpe:2.3:a:argoproj:argo_workflows:0.4.5
Argoproj » Argo Workflows » Version: 0.4.6

cpe:2.3:a:argoproj:argo_workflows:0.4.6
Argoproj » Argo Workflows » Version: 0.4.7

cpe:2.3:a:argoproj:argo_workflows:0.4.7
Argoproj » Argo Workflows » Version: 1.0.0

cpe:2.3:a:argoproj:argo_workflows:1.0.0
Argoproj » Argo Workflows » Version: 1.0.1

cpe:2.3:a:argoproj:argo_workflows:1.0.1
Argoproj » Argo Workflows » Version: 1.1.0

cpe:2.3:a:argoproj:argo_workflows:1.1.0
Argoproj » Argo Workflows » Version: 2.0.0

cpe:2.3:a:argoproj:argo_workflows:2.0.0
Argoproj » Argo Workflows » Version: 2.1.0

cpe:2.3:a:argoproj:argo_workflows:2.1.0
Argoproj » Argo Workflows » Version: 2.1.1

cpe:2.3:a:argoproj:argo_workflows:2.1.1
Argoproj » Argo Workflows » Version: 2.1.2

cpe:2.3:a:argoproj:argo_workflows:2.1.2
Argoproj » Argo Workflows » Version: 2.10.0

cpe:2.3:a:argoproj:argo_workflows:2.10.0
Argoproj » Argo Workflows » Version: 2.10.1

cpe:2.3:a:argoproj:argo_workflows:2.10.1
Argoproj » Argo Workflows » Version: 2.10.2

cpe:2.3:a:argoproj:argo_workflows:2.10.2
Argoproj » Argo Workflows » Version: 2.11.0

cpe:2.3:a:argoproj:argo_workflows:2.11.0
Argoproj » Argo Workflows » Version: 2.11.1

cpe:2.3:a:argoproj:argo_workflows:2.11.1
Argoproj » Argo Workflows » Version: 2.11.2

cpe:2.3:a:argoproj:argo_workflows:2.11.2
Argoproj » Argo Workflows » Version: 2.11.3

cpe:2.3:a:argoproj:argo_workflows:2.11.3
Argoproj » Argo Workflows » Version: 2.11.4

cpe:2.3:a:argoproj:argo_workflows:2.11.4
Argoproj » Argo Workflows » Version: 2.11.5

cpe:2.3:a:argoproj:argo_workflows:2.11.5
Argoproj » Argo Workflows » Version: 2.11.6

cpe:2.3:a:argoproj:argo_workflows:2.11.6
Argoproj » Argo Workflows » Version: 2.11.7

cpe:2.3:a:argoproj:argo_workflows:2.11.7
Argoproj » Argo Workflows » Version: 2.11.8

cpe:2.3:a:argoproj:argo_workflows:2.11.8
Argoproj » Argo Workflows » Version: 2.12.0

cpe:2.3:a:argoproj:argo_workflows:2.12.0
Argoproj » Argo Workflows » Version: 2.12.1

cpe:2.3:a:argoproj:argo_workflows:2.12.1
Argoproj » Argo Workflows » Version: 2.12.10

cpe:2.3:a:argoproj:argo_workflows:2.12.10
Argoproj » Argo Workflows » Version: 2.12.11

cpe:2.3:a:argoproj:argo_workflows:2.12.11
Argoproj » Argo Workflows » Version: 2.12.12

cpe:2.3:a:argoproj:argo_workflows:2.12.12
Argoproj » Argo Workflows » Version: 2.12.13

cpe:2.3:a:argoproj:argo_workflows:2.12.13
Argoproj » Argo Workflows » Version: 2.12.2

cpe:2.3:a:argoproj:argo_workflows:2.12.2
Argoproj » Argo Workflows » Version: 2.12.3

cpe:2.3:a:argoproj:argo_workflows:2.12.3
Argoproj » Argo Workflows » Version: 2.12.4

cpe:2.3:a:argoproj:argo_workflows:2.12.4
Argoproj » Argo Workflows » Version: 2.12.5

cpe:2.3:a:argoproj:argo_workflows:2.12.5
Argoproj » Argo Workflows » Version: 2.12.6

cpe:2.3:a:argoproj:argo_workflows:2.12.6
Argoproj » Argo Workflows » Version: 2.12.7

cpe:2.3:a:argoproj:argo_workflows:2.12.7
Argoproj » Argo Workflows » Version: 2.12.8

cpe:2.3:a:argoproj:argo_workflows:2.12.8
Argoproj » Argo Workflows » Version: 2.12.9

cpe:2.3:a:argoproj:argo_workflows:2.12.9
Argoproj » Argo Workflows » Version: 2.2.0

cpe:2.3:a:argoproj:argo_workflows:2.2.0
Argoproj » Argo Workflows » Version: 2.2.1

cpe:2.3:a:argoproj:argo_workflows:2.2.1
Argoproj » Argo Workflows » Version: 2.3.0

cpe:2.3:a:argoproj:argo_workflows:2.3.0
Argoproj » Argo Workflows » Version: 2.4.0

cpe:2.3:a:argoproj:argo_workflows:2.4.0
Argoproj » Argo Workflows » Version: 2.4.1

cpe:2.3:a:argoproj:argo_workflows:2.4.1
Argoproj » Argo Workflows » Version: 2.4.2

cpe:2.3:a:argoproj:argo_workflows:2.4.2
Argoproj » Argo Workflows » Version: 2.4.3

cpe:2.3:a:argoproj:argo_workflows:2.4.3
Argoproj » Argo Workflows » Version: 2.5.0

cpe:2.3:a:argoproj:argo_workflows:2.5.0
Argoproj » Argo Workflows » Version: 2.5.1

cpe:2.3:a:argoproj:argo_workflows:2.5.1
Argoproj » Argo Workflows » Version: 2.5.2

cpe:2.3:a:argoproj:argo_workflows:2.5.2
Argoproj » Argo Workflows » Version: 2.5.3

cpe:2.3:a:argoproj:argo_workflows:2.5.3
Argoproj » Argo Workflows » Version: 2.6.0

cpe:2.3:a:argoproj:argo_workflows:2.6.0
Argoproj » Argo Workflows » Version: 2.6.1

cpe:2.3:a:argoproj:argo_workflows:2.6.1
Argoproj » Argo Workflows » Version: 2.6.2

cpe:2.3:a:argoproj:argo_workflows:2.6.2
Argoproj » Argo Workflows » Version: 2.6.3

cpe:2.3:a:argoproj:argo_workflows:2.6.3
Argoproj » Argo Workflows » Version: 2.6.4

cpe:2.3:a:argoproj:argo_workflows:2.6.4
Argoproj » Argo Workflows » Version: 2.7.0

cpe:2.3:a:argoproj:argo_workflows:2.7.0
Argoproj » Argo Workflows » Version: 2.7.1

cpe:2.3:a:argoproj:argo_workflows:2.7.1
Argoproj » Argo Workflows » Version: 2.7.2

cpe:2.3:a:argoproj:argo_workflows:2.7.2
Argoproj » Argo Workflows » Version: 2.7.3

cpe:2.3:a:argoproj:argo_workflows:2.7.3
Argoproj » Argo Workflows » Version: 2.7.4

cpe:2.3:a:argoproj:argo_workflows:2.7.4
Argoproj » Argo Workflows » Version: 2.7.5

cpe:2.3:a:argoproj:argo_workflows:2.7.5
Argoproj » Argo Workflows » Version: 2.7.6

cpe:2.3:a:argoproj:argo_workflows:2.7.6
Argoproj » Argo Workflows » Version: 2.7.7

cpe:2.3:a:argoproj:argo_workflows:2.7.7
Argoproj » Argo Workflows » Version: 2.8.0

cpe:2.3:a:argoproj:argo_workflows:2.8.0
Argoproj » Argo Workflows » Version: 2.8.1

cpe:2.3:a:argoproj:argo_workflows:2.8.1
Argoproj » Argo Workflows » Version: 2.8.2

cpe:2.3:a:argoproj:argo_workflows:2.8.2
Argoproj » Argo Workflows » Version: 2.9.0

cpe:2.3:a:argoproj:argo_workflows:2.9.0
Argoproj » Argo Workflows » Version: 2.9.1

cpe:2.3:a:argoproj:argo_workflows:2.9.1
Argoproj » Argo Workflows » Version: 2.9.2

cpe:2.3:a:argoproj:argo_workflows:2.9.2
Argoproj » Argo Workflows » Version: 2.9.3

cpe:2.3:a:argoproj:argo_workflows:2.9.3
Argoproj » Argo Workflows » Version: 2.9.4

cpe:2.3:a:argoproj:argo_workflows:2.9.4
Argoproj » Argo Workflows » Version: 2.9.5

cpe:2.3:a:argoproj:argo_workflows:2.9.5
Argoproj » Argo Workflows » Version: 3.0.0

cpe:2.3:a:argoproj:argo_workflows:3.0.0
Argoproj » Argo Workflows » Version: 3.0.1

cpe:2.3:a:argoproj:argo_workflows:3.0.1
Argoproj » Argo Workflows » Version: 3.0.10

cpe:2.3:a:argoproj:argo_workflows:3.0.10
Argoproj » Argo Workflows » Version: 3.0.2

cpe:2.3:a:argoproj:argo_workflows:3.0.2
Argoproj » Argo Workflows » Version: 3.0.3

cpe:2.3:a:argoproj:argo_workflows:3.0.3
Argoproj » Argo Workflows » Version: 3.0.4

cpe:2.3:a:argoproj:argo_workflows:3.0.4
Argoproj » Argo Workflows » Version: 3.0.5

cpe:2.3:a:argoproj:argo_workflows:3.0.5
Argoproj » Argo Workflows » Version: 3.0.6

cpe:2.3:a:argoproj:argo_workflows:3.0.6
Argoproj » Argo Workflows » Version: 3.0.7

cpe:2.3:a:argoproj:argo_workflows:3.0.7
Argoproj » Argo Workflows » Version: 3.0.8

cpe:2.3:a:argoproj:argo_workflows:3.0.8
Argoproj » Argo Workflows » Version: 3.0.9

cpe:2.3:a:argoproj:argo_workflows:3.0.9
Argoproj » Argo Workflows » Version: 3.1.0

cpe:2.3:a:argoproj:argo_workflows:3.1.0
Argoproj » Argo Workflows » Version: 3.1.1

cpe:2.3:a:argoproj:argo_workflows:3.1.1
Argoproj » Argo Workflows » Version: 3.1.10

cpe:2.3:a:argoproj:argo_workflows:3.1.10
Argoproj » Argo Workflows » Version: 3.1.11

cpe:2.3:a:argoproj:argo_workflows:3.1.11
Argoproj » Argo Workflows » Version: 3.1.12

cpe:2.3:a:argoproj:argo_workflows:3.1.12
Argoproj » Argo Workflows » Version: 3.1.13

cpe:2.3:a:argoproj:argo_workflows:3.1.13
Argoproj » Argo Workflows » Version: 3.1.14

cpe:2.3:a:argoproj:argo_workflows:3.1.14
Argoproj » Argo Workflows » Version: 3.1.15

cpe:2.3:a:argoproj:argo_workflows:3.1.15
Argoproj » Argo Workflows » Version: 3.1.2

cpe:2.3:a:argoproj:argo_workflows:3.1.2
Argoproj » Argo Workflows » Version: 3.1.3

cpe:2.3:a:argoproj:argo_workflows:3.1.3
Argoproj » Argo Workflows » Version: 3.1.4

cpe:2.3:a:argoproj:argo_workflows:3.1.4
Argoproj » Argo Workflows » Version: 3.1.5

cpe:2.3:a:argoproj:argo_workflows:3.1.5
Argoproj » Argo Workflows » Version: 3.1.6

cpe:2.3:a:argoproj:argo_workflows:3.1.6
Argoproj » Argo Workflows » Version: 3.1.7

cpe:2.3:a:argoproj:argo_workflows:3.1.7
Argoproj » Argo Workflows » Version: 3.1.8

cpe:2.3:a:argoproj:argo_workflows:3.1.8
Argoproj » Argo Workflows » Version: 3.1.9

cpe:2.3:a:argoproj:argo_workflows:3.1.9
Argoproj » Argo Workflows » Version: 3.2.0

cpe:2.3:a:argoproj:argo_workflows:3.2.0
Argoproj » Argo Workflows » Version: 3.2.1

cpe:2.3:a:argoproj:argo_workflows:3.2.1
Argoproj » Argo Workflows » Version: 3.2.10

cpe:2.3:a:argoproj:argo_workflows:3.2.10
Argoproj » Argo Workflows » Version: 3.2.11

cpe:2.3:a:argoproj:argo_workflows:3.2.11
Argoproj » Argo Workflows » Version: 3.2.2

cpe:2.3:a:argoproj:argo_workflows:3.2.2
Argoproj » Argo Workflows » Version: 3.2.3

cpe:2.3:a:argoproj:argo_workflows:3.2.3
Argoproj » Argo Workflows » Version: 3.2.4

cpe:2.3:a:argoproj:argo_workflows:3.2.4
Argoproj » Argo Workflows » Version: 3.2.5

cpe:2.3:a:argoproj:argo_workflows:3.2.5
Argoproj » Argo Workflows » Version: 3.2.6

cpe:2.3:a:argoproj:argo_workflows:3.2.6
Argoproj » Argo Workflows » Version: 3.2.7

cpe:2.3:a:argoproj:argo_workflows:3.2.7
Argoproj » Argo Workflows » Version: 3.2.8

cpe:2.3:a:argoproj:argo_workflows:3.2.8
Argoproj » Argo Workflows » Version: 3.2.9

cpe:2.3:a:argoproj:argo_workflows:3.2.9
Argoproj » Argo Workflows » Version: 3.3.0

cpe:2.3:a:argoproj:argo_workflows:3.3.0
Argoproj » Argo Workflows » Version: 3.3.1

cpe:2.3:a:argoproj:argo_workflows:3.3.1
Argoproj » Argo Workflows » Version: 3.3.10

cpe:2.3:a:argoproj:argo_workflows:3.3.10
Argoproj » Argo Workflows » Version: 3.3.2

cpe:2.3:a:argoproj:argo_workflows:3.3.2
Argoproj » Argo Workflows » Version: 3.3.3

cpe:2.3:a:argoproj:argo_workflows:3.3.3
Argoproj » Argo Workflows » Version: 3.3.4

cpe:2.3:a:argoproj:argo_workflows:3.3.4
Argoproj » Argo Workflows » Version: 3.3.5

cpe:2.3:a:argoproj:argo_workflows:3.3.5
Argoproj » Argo Workflows » Version: 3.3.6

cpe:2.3:a:argoproj:argo_workflows:3.3.6
Argoproj » Argo Workflows » Version: 3.3.7

cpe:2.3:a:argoproj:argo_workflows:3.3.7
Argoproj » Argo Workflows » Version: 3.3.8

cpe:2.3:a:argoproj:argo_workflows:3.3.8
Argoproj » Argo Workflows » Version: 3.3.9

cpe:2.3:a:argoproj:argo_workflows:3.3.9
Argoproj » Argo Workflows » Version: 3.4.0

cpe:2.3:a:argoproj:argo_workflows:3.4.0
Argoproj » Argo Workflows » Version: 3.4.1

cpe:2.3:a:argoproj:argo_workflows:3.4.1
Argoproj » Argo Workflows » Version: 3.4.10

cpe:2.3:a:argoproj:argo_workflows:3.4.10
Argoproj » Argo Workflows » Version: 3.4.11

cpe:2.3:a:argoproj:argo_workflows:3.4.11
Argoproj » Argo Workflows » Version: 3.4.12

cpe:2.3:a:argoproj:argo_workflows:3.4.12
Argoproj » Argo Workflows » Version: 3.4.13

cpe:2.3:a:argoproj:argo_workflows:3.4.13
Argoproj » Argo Workflows » Version: 3.4.14

cpe:2.3:a:argoproj:argo_workflows:3.4.14
Argoproj » Argo Workflows » Version: 3.4.15

cpe:2.3:a:argoproj:argo_workflows:3.4.15
Argoproj » Argo Workflows » Version: 3.4.16

cpe:2.3:a:argoproj:argo_workflows:3.4.16
Argoproj » Argo Workflows » Version: 3.4.17

cpe:2.3:a:argoproj:argo_workflows:3.4.17
Argoproj » Argo Workflows » Version: 3.4.18

cpe:2.3:a:argoproj:argo_workflows:3.4.18
Argoproj » Argo Workflows » Version: 3.4.2

cpe:2.3:a:argoproj:argo_workflows:3.4.2
Argoproj » Argo Workflows » Version: 3.4.3

cpe:2.3:a:argoproj:argo_workflows:3.4.3
Argoproj » Argo Workflows » Version: 3.4.4

cpe:2.3:a:argoproj:argo_workflows:3.4.4
Argoproj » Argo Workflows » Version: 3.4.5

cpe:2.3:a:argoproj:argo_workflows:3.4.5
Argoproj » Argo Workflows » Version: 3.4.6

cpe:2.3:a:argoproj:argo_workflows:3.4.6
Argoproj » Argo Workflows » Version: 3.4.7

cpe:2.3:a:argoproj:argo_workflows:3.4.7
Argoproj » Argo Workflows » Version: 3.4.8

cpe:2.3:a:argoproj:argo_workflows:3.4.8
Argoproj » Argo Workflows » Version: 3.4.9

cpe:2.3:a:argoproj:argo_workflows:3.4.9
Argoproj » Argo Workflows » Version: 3.5.0

cpe:2.3:a:argoproj:argo_workflows:3.5.0
Argoproj » Argo Workflows » Version: 3.5.1

cpe:2.3:a:argoproj:argo_workflows:3.5.1
Argoproj » Argo Workflows » Version: 3.5.10

cpe:2.3:a:argoproj:argo_workflows:3.5.10
Argoproj » Argo Workflows » Version: 3.5.11

cpe:2.3:a:argoproj:argo_workflows:3.5.11
Argoproj » Argo Workflows » Version: 3.5.12

cpe:2.3:a:argoproj:argo_workflows:3.5.12
Argoproj » Argo Workflows » Version: 3.5.13

cpe:2.3:a:argoproj:argo_workflows:3.5.13
Argoproj » Argo Workflows » Version: 3.5.14

cpe:2.3:a:argoproj:argo_workflows:3.5.14
Argoproj » Argo Workflows » Version: 3.5.15

cpe:2.3:a:argoproj:argo_workflows:3.5.15
Argoproj » Argo Workflows » Version: 3.5.2

cpe:2.3:a:argoproj:argo_workflows:3.5.2
Argoproj » Argo Workflows » Version: 3.5.3

cpe:2.3:a:argoproj:argo_workflows:3.5.3
Argoproj » Argo Workflows » Version: 3.5.4

cpe:2.3:a:argoproj:argo_workflows:3.5.4
Argoproj » Argo Workflows » Version: 3.5.5

cpe:2.3:a:argoproj:argo_workflows:3.5.5
Argoproj » Argo Workflows » Version: 3.5.6

cpe:2.3:a:argoproj:argo_workflows:3.5.6
Argoproj » Argo Workflows » Version: 3.5.7

cpe:2.3:a:argoproj:argo_workflows:3.5.7
Argoproj » Argo Workflows » Version: 3.5.8

cpe:2.3:a:argoproj:argo_workflows:3.5.8
Argoproj » Argo Workflows » Version: 3.5.9

cpe:2.3:a:argoproj:argo_workflows:3.5.9
Argoproj » Argo Workflows » Version: 3.6.0

cpe:2.3:a:argoproj:argo_workflows:3.6.0
Argoproj » Argo Workflows » Version: 3.6.10

cpe:2.3:a:argoproj:argo_workflows:3.6.10
Argoproj » Argo Workflows » Version: 3.6.11

cpe:2.3:a:argoproj:argo_workflows:3.6.11
Argoproj » Argo Workflows » Version: 3.6.12

cpe:2.3:a:argoproj:argo_workflows:3.6.12
Argoproj » Argo Workflows » Version: 3.6.13

cpe:2.3:a:argoproj:argo_workflows:3.6.13
Argoproj » Argo Workflows » Version: 3.6.14

cpe:2.3:a:argoproj:argo_workflows:3.6.14
Argoproj » Argo Workflows » Version: 3.6.15

cpe:2.3:a:argoproj:argo_workflows:3.6.15
Argoproj » Argo Workflows » Version: 3.6.16

cpe:2.3:a:argoproj:argo_workflows:3.6.16
Argoproj » Argo Workflows » Version: 3.6.2

cpe:2.3:a:argoproj:argo_workflows:3.6.2
Argoproj » Argo Workflows » Version: 3.6.3

cpe:2.3:a:argoproj:argo_workflows:3.6.3
Argoproj » Argo Workflows » Version: 3.6.4

cpe:2.3:a:argoproj:argo_workflows:3.6.4
Argoproj » Argo Workflows » Version: 3.6.5

cpe:2.3:a:argoproj:argo_workflows:3.6.5
Argoproj » Argo Workflows » Version: 3.6.6

cpe:2.3:a:argoproj:argo_workflows:3.6.6
Argoproj » Argo Workflows » Version: 3.6.7

cpe:2.3:a:argoproj:argo_workflows:3.6.7
Argoproj » Argo Workflows » Version: 3.6.8

cpe:2.3:a:argoproj:argo_workflows:3.6.8
Argoproj » Argo Workflows » Version: 3.6.9

cpe:2.3:a:argoproj:argo_workflows:3.6.9
Argoproj » Argo Workflows » Version: 3.7.0

cpe:2.3:a:argoproj:argo_workflows:3.7.0
Argoproj » Argo Workflows » Version: 3.7.1

cpe:2.3:a:argoproj:argo_workflows:3.7.1
Argoproj » Argo Workflows » Version: 3.7.2

cpe:2.3:a:argoproj:argo_workflows:3.7.2
Argoproj » Argo Workflows » Version: 3.7.3

cpe:2.3:a:argoproj:argo_workflows:3.7.3
Argoproj » Argo Workflows » Version: 3.7.4

cpe:2.3:a:argoproj:argo_workflows:3.7.4
Argoproj » Argo Workflows » Version: 3.7.5

cpe:2.3:a:argoproj:argo_workflows:3.7.5
Argoproj » Argo Workflows » Version: 3.7.6

cpe:2.3:a:argoproj:argo_workflows:3.7.6
Argoproj » Argo Workflows » Version: 3.7.7

cpe:2.3:a:argoproj:argo_workflows:3.7.7

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-23960

Products

Pricing

Contact Us