CLEANSTART-2026-TP45271: weakness has been identified in garycourt uri-js up to 4

Q: What does an attacker need to exploit this issue?

The reported vector indicates network access is sufficient, exploitation has low attack complexity, and no privileges are required. However, user interaction is required.

Q: What is the reported security impact?

The issue is rated low severity with a CVSS score of 2.1. It is reported to affect availability at a low level, with no reported confidentiality or integrity impact.

Q: How can I identify potentially affected deployments?

Review deployments using the cleanstart/argo-workflows package and inspect their dependency inventory for garycourt uri-js versions up to 4. The supplied data does not identify affected argo-workflows versions or a fixed version.

Published Nov 11, 2026

Updated

Security vulnerability affects the argo-workflows package. A weakness has been identified in garycourt uri-js up to 4.

Affected Software

1 affected componentFixes available

cleanstart/argo-workflows<4.0.15-r2

4.0.15-r2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/argo-workflows to a version that resolves this vulnerability.
Fixed in 4.0.15-r2

Event History

Nov 11, 2026

Advisory Published

via OSV·12:41 AM

Data Sourced

via OSV·12:41 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-103387

Frequently Asked Questions

What does an attacker need to exploit this issue?

The reported vector indicates network access is sufficient, exploitation has low attack complexity, and no privileges are required. However, user interaction is required.

What is the reported security impact?

The issue is rated low severity with a CVSS score of 2.1. It is reported to affect availability at a low level, with no reported confidentiality or integrity impact.

How can I identify potentially affected deployments?

Review deployments using the cleanstart/argo-workflows package and inspect their dependency inventory for garycourt uri-js versions up to 4. The supplied data does not identify affected argo-workflows versions or a fixed version.

CLEANSTART-2026-TP45271: weakness has been identified in garycourt uri-js up to 4

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the reported security impact?

How can I identify potentially affected deployments?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the reported security impact?

How can I identify potentially affected deployments?