CLEANSTART-2026-RT58721: uri-js through 4

Q: Which deployments are potentially exposed?

Deployments using the cleanstart/argo-workflows package may be affected if they include uri-js through version 4. The provided data does not identify specific affected cleanstart/argo-workflows versions or configurations.

Q: Does exploitation require authentication or user interaction?

The supplied vector indicates network access, low attack complexity, no privileges required, and no user interaction required. It also indicates potential low confidentiality and integrity impact, with no availability impact.

Q: How can I determine whether my environment is affected?

Inspect the dependency tree for the cleanstart/argo-workflows package and identify the resolved uri-js version. Versions through 4 are identified as affected by the provided advisory data.

Published Nov 11, 2026

Updated

Security vulnerability affects the argo-workflows package. uri-js through 4.

Affected Software

1 affected componentFixes available

cleanstart/argo-workflows<4.0.15-r2

4.0.15-r2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/argo-workflows to a version that resolves this vulnerability.
Fixed in 4.0.15-r2

Event History

Nov 11, 2026

Advisory Published

via OSV·12:41 AM

Data Sourced

via OSV·12:41 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-93751

Frequently Asked Questions

Which deployments are potentially exposed?

Deployments using the cleanstart/argo-workflows package may be affected if they include uri-js through version 4. The provided data does not identify specific affected cleanstart/argo-workflows versions or configurations.

Does exploitation require authentication or user interaction?

The supplied vector indicates network access, low attack complexity, no privileges required, and no user interaction required. It also indicates potential low confidentiality and integrity impact, with no availability impact.

How can I determine whether my environment is affected?

Inspect the dependency tree for the cleanstart/argo-workflows package and identify the resolved uri-js version. Versions through 4 are identified as affected by the provided advisory data.

CLEANSTART-2026-RT58721: uri-js through 4

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which deployments are potentially exposed?

Does exploitation require authentication or user interaction?

How can I determine whether my environment is affected?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are potentially exposed?

Does exploitation require authentication or user interaction?

How can I determine whether my environment is affected?