CLEANSTART-2026-QR13400: ws is an open source WebSocket client and server for Node

Q: Can this be exploited remotely without credentials or user interaction?

The supplied CVSS vector indicates network-based exploitation with low attack complexity, no required privileges, and no user interaction.

Q: What is the expected security impact?

The CVSS vector indicates a high availability impact, with no reported confidentiality or integrity impact.

Q: Are affected versions or configuration conditions identified?

No affected version range or configuration condition is provided in the supplied data. The referenced advisory records are the available sources for determining whether a specific deployment is affected.

Published Nov 11, 2026

Updated

Security vulnerability affects the argo-workflows package. ws is an open source WebSocket client and server for Node.

Affected Software

2 affected componentsFixes available

cleanstart/argo-workflows<4.1.6-r1

4.1.6-r1

cleanstart/argo-workflows<4.0.15-r2

4.0.15-r2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/argo-workflows to a version that resolves this vulnerability.
Fixed in 4.1.6-r1
Upgrade
Upgrade cleanstart/argo-workflows to a version that resolves this vulnerability.
Fixed in 4.0.15-r2

Event History

Nov 11, 2026

Advisory Published

via OSV·12:41 AM

Data Sourced

via OSV·12:41 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-48779

Frequently Asked Questions

Can this be exploited remotely without credentials or user interaction?

The supplied CVSS vector indicates network-based exploitation with low attack complexity, no required privileges, and no user interaction.

What is the expected security impact?

The CVSS vector indicates a high availability impact, with no reported confidentiality or integrity impact.

Are affected versions or configuration conditions identified?

No affected version range or configuration condition is provided in the supplied data. The referenced advisory records are the available sources for determining whether a specific deployment is affected.

CLEANSTART-2026-QR13400: ws is an open source WebSocket client and server for Node

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Can this be exploited remotely without credentials or user interaction?

What is the expected security impact?

Are affected versions or configuration conditions identified?

Company

Resources

Contact

Frequently Asked Questions

Can this be exploited remotely without credentials or user interaction?

What is the expected security impact?

Are affected versions or configuration conditions identified?