argos-javascript vulnerabilities

1 known vulnerability in argos-javascript from Argos-ci. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  argos-javascript: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-59960Sep 14, 2026Argos-ci

  Argos JavaScript provides official Argos SDKs for JavaScript. Prior to Argos core package version 6.2.1, attacker-controlled CI branch or ref values from GITHUB_HEAD_REF or ARGOS_BRANCH can flow through config.branch and getMergeBaseCommitSha() when hasRemoteC