Security Advisories

CGA-c8mw-2r5f-43qx

Published

Last updated

Package

argo-workflows

Latest Update

Fixed

Fixed Version

3.6.0-r0

Aliases

Severity

10.0

Critical

CVSS V3

DOMpurify has a nesting-based mXSS

DOMpurify was vulnerable to nesting-based mXSS

fixed by 0ef5e537 (2.x) and merge 943

Backporter should be aware of GHSA-mmhx-hmjr-r674 (CVE-2024-45801) when cherry-picking

POC is avaible under test

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™