{"id":"GO-2025-4024","revision":"d80b0c31d2d24343a656e573a8afa048","records":[{"revision":"d80b0c31d2d24343a656e573a8afa048","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-4024","aliases":["BIT-argo-workflows-2025-62157","CVE-2025-62157","GHSA-c2hv-4pfj-mm2r"],"title":"Argo Workflow may expose artifact repository credentials in github.com/argoproj/argo-workflows","description":"Argo Workflow may expose artifact repository credentials in github.com/argoproj/argo-workflows","state":0,"publishedAt":"2025-11-05T18:41:15+00:00","modifiedAt":"2026-02-04T04:10:52.070161+00:00","affected":[{"ecosystem":"Go","name":"github.com/argoproj/argo-workflows","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/argoproj/argo-workflows/v2","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/argoproj/argo-workflows/v3","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"3.6.12"},{"kind":"introduced","version":"3.7.0"},{"kind":"fixed","version":"3.7.3"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/argoproj/argo-workflows/security/advisories/GHSA-c2hv-4pfj-mm2r","https://nvd.nist.gov/vuln/detail/CVE-2025-62157","https://github.com/argoproj/argo-workflows/commit/18ad5138b6bcb2aba04e00b4ec657bc6b8fad8df","https://github.com/argoproj/argo-workflows/commit/bded09fe4abd37cb98d7fc81b4c14a6f5034e9ab"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-4024","license":"OSV · upstream source license applies","key":"osv:GO-2025-4024","identifiers":["GO-2025-4024","BIT-argo-workflows-2025-62157","CVE-2025-62157","GHSA-c2hv-4pfj-mm2r"]},"retained":false,"historicalAffected":[]}],"coverage":[]}