CLEANSTART-2026-YO76079: webpack-dev-server versions 5
Security vulnerability affects the argo-workflows package. webpack-dev-server versions 5.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/argo-workflowsto a version that resolves this vulnerability.Fixed in 4.1.6-r1 - Upgrade
Upgrade
cleanstart/argo-workflowsto a version that resolves this vulnerability.Fixed in 4.0.15-r2
Event History
Frequently Asked Questions
Does exploitation require an authenticated account or other privileges?
No privileges are required. The CVSS vector indicates network reachability, low attack complexity, and required user interaction.
What is the expected security impact if exploitation succeeds?
The reported impact is limited to low availability impact. No confidentiality or integrity impact is reported, and the scope is marked as changed.
How can I determine whether this applies to my deployment?
Review whether your cleanstart/argo-workflows software includes webpack-dev-server version 5. The supplied data does not identify affected or fixed patch versions within that major version.