x/vulndb: potential Go vuln in github.com/argoproj/argo-workflows/v3: GHSA-prqf-xr2j-xf65

[GoVulnBot]

In GitHub Security Advisory GHSA-prqf-xr2j-xf65, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
github.com/argoproj/argo-workflows/v3	3.1.6	>= 3.1.0, < 3.1.6

See doc/triage.md for instructions on how to triage this report.

package: github.com/argoproj/argo-workflows/v3
additional_packages:
  - package: github.com/argoproj/argo-workflows/v3
    versions:
      - introduced: v3.0.0
        fixed: v3.0.9
versions:
  - introduced: v3.1.0
    fixed: v3.1.6
description: "### Impact\n\nThis is pro-active fix. No know exploits exist. \n\nImpacted:\n\n*
    You're running Kubernetes >= v1.19\n* You're running Argo Server\n* It is configured
    to with `--auth-mode=client`\n* Is not configured with `--auth-mode=server`\n*
    You are not running Argo Server in Kubernetes pod. E.g. on bare metal or other
    VM.\n* You're using client key to authenticate on the server. \n* The server has
    more permissions that the connecting client's account.\n\nThe client's authentication
    will be ignored and the server's authentication will be used. This will result
    in privilege escalation to that of the the server's account.\n\n### Patches\n\nhttps://github.com/argoproj/argo-workflows/pull/6506\n\n###
    Workarounds\n\nNone."
published: 2021-08-23T19:41:41Z
last_modified: 2021-08-23T19:41:41Z
ghsas:
  - GHSA-prqf-xr2j-xf65

[neild]

Vulnerability in tool.

[gopherbot]

Change https://go.dev/cl/592767 mentions this issue: data/reports: unexclude 50 reports

[gopherbot]

Change https://go.dev/cl/607217 mentions this issue: data/reports: unexclude 20 reports (15)