Affected by GO-2022-0388
and 17 other vulnerabilities
GO-2022-0388: Argo Server TLS requests could be forged by attacker with network access in github.com/argoproj/argo-workflows
GO-2022-0405: Potential privilege escalation on Kubernetes >= v1.19 when the Argo Sever is run with `--auth-mode=client` in github.com/argoproj/argo-workflows
GO-2022-0928: Workflow re-write vulnerability using input parameter in github.com/argoproj/argo-workflows
GO-2024-3226: Argo Workflows Controller: Denial of Service via malicious daemon Workflows in github.com/argoproj/argo-workflows
GO-2024-3303: Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode in github.com/argoproj/argo-workflows
GO-2025-4023: Argo Workflow has a Zipslip Vulnerability in github.com/argoproj/argo-workflows
GO-2025-4024: Argo Workflow may expose artifact repository credentials in github.com/argoproj/argo-workflows
GO-2025-4223: RCE via ZipSlip and symbolic links in argoproj/argo-workflows in github.com/argoproj/argo-workflows
GO-2026-4350: Argo Workflows affected by stored XSS in the artifact directory listing in github.com/argoproj/argo-workflows
GO-2026-4678: Unauthorized access to Argo Workflows Template in github.com/argoproj/argo-workflows
GO-2026-4681: Argo Workflows: WorkflowTemplate Security Bypass via podSpecPatch in Strict/Secure Reference Mode in github.com/argoproj/argo-workflows
GO-2026-5072: Argo has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure in github.com/argoproj/argo-workflows
GO-2026-5148: Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows Controller in github.com/argoproj/argo-workflows
GO-2026-5235: Argo vulnerable to exposure of artifact repository credentials in github.com/argoproj/argo-workflows
GO-2026-5462: Argo Vulnerable to Unauthenticated Memory Exhaustion (DoS) in Webhook Interceptor in github.com/argoproj/argo-workflows
GO-2026-5527: Argo Affected by SSO RBAC Delegation Nil Pointer Dereference DoS (gatekeeper.go) in github.com/argoproj/argo-workflows
GO-2026-5751: Argo has Missing Authorization in its Sync ConfigMap Provider in github.com/argoproj/argo-workflows
GO-2026-6223: Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list (Incomplete fix for CVE-2026-31892) in github.com/argoproj/argo-workflows
type CertOptions struct {
// Hostnames and IPs to generate a certificate for Hosts []string// Name of organization in certificate Organization string// Creation date ValidFrom time.Time// Duration that certificate is valid for ValidFor time.Duration// whether this cert should be its own Certificate Authority IsCA bool// Size of RSA key to generate. Ignored if --ecdsa-curve is set RSABits int// ECDSA curve to use to generate a key. Valid values are P224, P256 (recommended), P384, P521 ECDSACurve string
}
Affected by 
The highest tagged major version is
Documentation
¶
Source Files