Skip to content
OpenAdvisories

Product · argos-ci

argos-javascript

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-59960

    Argos JavaScript: CI Branch Name OS Command Injection in @argos-ci/core

    Argos JavaScript provides official Argos SDKs for JavaScript. Prior to Argos core package version 6.2.1, attacker-controlled CI branch or ref values from GITHUB_HEAD_REF or ARGOS_BRANCH can flow through config.branch and getMergeBaseCommitSha() when hasRemote…

    argos-ci argos-javascript @argos-ci/core npm