A vulnerability was found in argoproj argo-workflows up to 3.6.16/3.7.7 and classified as problematic. This affects an unknown function of the component Artifact Directory Listing Handler. Executing a manipulation can lead to cross site scripting.
This vulnerability is tracked as CVE-2026-23960. The attack can be launched remotely. No exploit exists.
It is suggested to upgrade the affected component.
