github.com/akuity/kargo
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Kargo has Open Redirect in UI OIDC Login Flow via redirectTo Query Parameter | github.com/akuity/kargo | Go | Low | Fix reported | |
| Kargo Vulnerable to SSRF in Promotion http/http-download Steps Enables Internal Network Access and Data Exfiltration | github.com/akuity/kargo | Go | Medium | Fix reported | |
| Kargo's `GetConfig()` and `RefreshResource()` API endpoints allow unauthenticated access | github.com/akuity/kargo | Go | Medium | Fix reported | |
| Kargo has an Authorization Bypass Vulnerability in Batch Resource Creation API Endpoints | github.com/akuity/kargo | Go | Critical | Fix reported | |
| Kargo has Missing Authorization Vulnerabilities in Approval & Promotion REST API Endpoints | github.com/akuity/kargo | Go | Medium | Fix reported |