CLEANSTART-2026-UE84813: fast-uri versions 2

Q: Who is exposed to this issue?

Deployments using the cleanstart/argo-workflows software package are identified as affected. The available data attributes the issue to fast-uri version 2 but does not specify which argo-workflows releases include it.

Q: Can this be exploited remotely without authentication or user interaction?

Yes. The supplied CVSS vector indicates network attack access, low attack complexity, no privileges required, and no user interaction required.

Q: What is the expected impact if exploitation succeeds?

The reported impact is integrity-only: integrity is rated high, while confidentiality and availability are rated none. The scope is listed as unchanged.

Published Nov 11, 2026

Updated

Security vulnerability affects the argo-workflows package. fast-uri versions 2.

Affected Software

1 affected componentFixes available

cleanstart/argo-workflows<4.1.6-r1

4.1.6-r1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/argo-workflows to a version that resolves this vulnerability.
Fixed in 4.1.6-r1

Event History

Nov 11, 2026

Advisory Published

via OSV·12:40 AM

Data Sourced

via OSV·12:40 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-13676

Frequently Asked Questions

Who is exposed to this issue?

Deployments using the cleanstart/argo-workflows software package are identified as affected. The available data attributes the issue to fast-uri version 2 but does not specify which argo-workflows releases include it.

Can this be exploited remotely without authentication or user interaction?

Yes. The supplied CVSS vector indicates network attack access, low attack complexity, no privileges required, and no user interaction required.

What is the expected impact if exploitation succeeds?

The reported impact is integrity-only: integrity is rated high, while confidentiality and availability are rated none. The scope is listed as unchanged.

CLEANSTART-2026-UE84813: fast-uri versions 2

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Who is exposed to this issue?

Can this be exploited remotely without authentication or user interaction?

What is the expected impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

Can this be exploited remotely without authentication or user interaction?

What is the expected impact if exploitation succeeds?