Argos-ci vulnerabilities
We track 1 vulnerability in Argos-ci products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 14, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Argos-ci vulnerabilities
- 7.5 High severity
argos-javascript: Improper Neutralization of Special Elements used in an OS Command
Argos JavaScript provides official Argos SDKs for JavaScript. Prior to Argos core package version 6.2.1, attacker-controlled CI branch or ref values from GITHUB_HEAD_REF or ARGOS_BRANCH can flow through config.branch and getMergeBaseCommitSha() when hasRemoteC