Repository navigation
Security: akuity/kargo
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Missing Authorization Vulnerability in Freight Approval Through the Kubernetes APIGHSA-rx5g-3338-f2mf published
Oct 2, 2026 by krancourModerate -
SSRF in Promotion http/http-download Steps Enables Access to the IPv6 Cloud Instance Metadata EndpointGHSA-8p8c-cfj9-vc94 published
Sep 30, 2026 by krancourModerate -
Missing Authorization Vulnerability in Resource Refresh API EndpointsGHSA-gp97-g7w8-w8c7 published
Sep 5, 2026 by krancourModerate -
Incorrect Authorization Vulnerability in Generic Resource API Endpoints Permits Unauthorized Writes to Cluster-Scoped ResourcesGHSA-mmqq-9f45-g6rh published
Sep 5, 2026 by krancourCritical -
Privilege escalation via Generic Resource Creation API EndpointsGHSA-xx8h-gw9m-m95p published
Jul 15, 2026 by krancourModerate -
Missing Authorization Vulnerability in Generic Resource Creation API EndpointsGHSA-f72x-6fm6-94rq published
Jul 15, 2026 by krancourModerate -
Privilege escalation via Project RBAC management in the Kargo APIGHSA-wp4p-hr79-q4g8 published
Jun 26, 2026 by thomastaylor312Moderate -
SSRF in Promotion http/http-download Steps Enables Internal Network Access and Data ExfiltrationGHSA-j94x-8wcp-x7hm published
Mar 14, 2026 by krancourModerate -
Authorization Bypass Vulnerability in Batch Resource Creation API EndpointsGHSA-7g9x-cp9g-92mr published
Feb 17, 2026 by krancourCritical -
Missing Authorization Vulnerabilities in Approval & Promotion REST API EndpointsGHSA-5vvm-67pj-72g4 published
Feb 17, 2026 by krancourModerate
Learn more about advisories related to akuity/kargo in the GitHub Advisory Database