CLEANSTART-2026-UZ95959: fast-uri is a URI parser for Node

Q: What access does an attacker need to exploit this issue?

The vector indicates the issue can be exploited over the network with low attack complexity. It requires no prior privileges and no user interaction.

Q: What is the expected security impact?

The reported impact is limited to integrity, meaning an attacker may be able to alter data or behavior. No confidentiality or availability impact is indicated by the provided vector.

Q: Which deployments should be prioritized for triage?

Prioritize installations of cleanstart/argo-workflows that are reachable over a network, because network access is the stated attack vector. The provided data does not identify affected versions, configurations, or a workaround.

Published Nov 11, 2026

Updated

Security vulnerability affects the argo-workflows package. fast-uri is a URI parser for Node.

Affected Software

1 affected componentFixes available

cleanstart/argo-workflows<4.1.6-r1

4.1.6-r1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/argo-workflows to a version that resolves this vulnerability.
Fixed in 4.1.6-r1

Event History

Nov 11, 2026

Advisory Published

via OSV·12:40 AM

Data Sourced

via OSV·12:40 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-75975

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The vector indicates the issue can be exploited over the network with low attack complexity. It requires no prior privileges and no user interaction.

What is the expected security impact?

The reported impact is limited to integrity, meaning an attacker may be able to alter data or behavior. No confidentiality or availability impact is indicated by the provided vector.

Which deployments should be prioritized for triage?

Prioritize installations of cleanstart/argo-workflows that are reachable over a network, because network access is the stated attack vector. The provided data does not identify affected versions, configurations, or a workaround.

CLEANSTART-2026-UZ95959: fast-uri is a URI parser for Node

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the expected security impact?

Which deployments should be prioritized for triage?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the expected security impact?

Which deployments should be prioritized for triage?