-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stemmed from HTML artifacts being served without proper security headers. The fix in commit 87470e1 added CSP headers in the returnArtifact function to prevent script execution. This function was directly responsible for serving artifact content, and the lack of CSP headers prior to the patch made it the vulnerable component.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/argoproj/argo-workflows/v3 | go | >= 2.6.0, < 3.2.11 | 3.2.11 |
| github.com/argoproj/argo-workflows/v3 | go | >= 3.3.0, < 3.3.5 | 3.3.5 |
GoGo