CLEANSTART-2026-SM25940: Impact: In body-parser versions prior to 1

Q: What access does an attacker need to attempt exploitation?

The vector is network-based, and the CVSS data indicates no privileges or user interaction are required. Exploitation is rated high complexity.

Q: What is the expected security impact?

The reported impact is availability only: availability impact is high, while confidentiality and integrity impacts are listed as none.

Q: How can I determine whether my deployment is affected?

The available data identifies cleanstart/argo-workflows and states that body-parser versions prior to 1 are affected. It does not identify specific affected argo-workflows versions or provide configuration-based detection guidance.

Published Nov 11, 2026

Updated

Security vulnerability affects the argo-workflows package. Impact: In body-parser versions prior to 1.

Affected Software

2 affected componentsFixes available

cleanstart/argo-workflows<4.1.6-r1

4.1.6-r1

cleanstart/argo-workflows<4.0.15-r2

4.0.15-r2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/argo-workflows to a version that resolves this vulnerability.
Fixed in 4.1.6-r1
Upgrade
Upgrade cleanstart/argo-workflows to a version that resolves this vulnerability.
Fixed in 4.0.15-r2

Event History

Nov 11, 2026

Advisory Published

via OSV·12:41 AM

Data Sourced

via OSV·12:41 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-12590

Frequently Asked Questions

What access does an attacker need to attempt exploitation?

The vector is network-based, and the CVSS data indicates no privileges or user interaction are required. Exploitation is rated high complexity.

What is the expected security impact?

The reported impact is availability only: availability impact is high, while confidentiality and integrity impacts are listed as none.

How can I determine whether my deployment is affected?

The available data identifies cleanstart/argo-workflows and states that body-parser versions prior to 1 are affected. It does not identify specific affected argo-workflows versions or provide configuration-based detection guidance.

CLEANSTART-2026-SM25940: Impact: In body-parser versions prior to 1

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

What access does an attacker need to attempt exploitation?

What is the expected security impact?

How can I determine whether my deployment is affected?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to attempt exploitation?

What is the expected security impact?

How can I determine whether my deployment is affected?