KA
Product
kargo
5
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 3Low 0
Watch
Add kargo to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-42350 | 5.1 | May 8 | Kargo: Open Redirect in UI OIDC Login Flow via redirectTo Query Parameter Affected: < 1.7.10; >= 1.8.0-rc.1, < 1.8.13; >= 1.9.0-rc.1, < 1.9.8; >= 1.10.0-rc.1, < 1.10.2 |
| CVE-2026-27111 | 5.0 | Feb 20 | Kargo has Missing Authorization Vulnerabilities in Approval & Promotion REST API Endpoints Affected: >= 1.9.0, < 1.9.3 |
| CVE-2026-32828 | 4.9 | Mar 20 | Kargo: SSRF in Promotion http/http-download Steps Enables Internal Network Access and Data Exfiltration Affected: >= 1.4.0, < 1.6.4; >= 1.7.0-rc.1, < 1.7.9; >= 1.8.0-rc.1, < 1.8.12; >= 1.9.0-rc.1, < 1.9.5 |
Showing 3