{"id":"ECHO-09ab-52a5-d9b1","upstream":["CVE-2026-54526","GHSA-48p8-g2fx-3wwm"],"severity":[],"modified":"2026-10-24T00:00:51.607Z","affected":[{"package":{"ecosystem":"Echo:Go","name":"github.com/argoproj/argo-workflows/v3","purl":"pkg:golang/github.com/argoproj/argo-workflows/v3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.15"}]}]},{"package":{"ecosystem":"Echo:Go","name":"github.com/argoproj/argo-workflows/v4","purl":"pkg:golang/github.com/argoproj/argo-workflows/v4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.15"}]}]}],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-54526"},{"type":"WEB","url":"https://github.com/advisories/GHSA-48p8-g2fx-3wwm"}]}