Skip to content
OpenAdvisories

Package · Go

github.com/akuity/kargo

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.4
    CVE-2026-27112

    Kargo has an Authorization Bypass Vulnerability in Batch Resource Creation API Endpoints

    Kargo manages and automates the promotion of software artifacts. From 1.7.0 to before v1.7.8, v1.8.11, and v1.9.3, the batch resource creation endpoints of both Kargo's legacy gRPC API and newer REST API accept multi-document YAML payloads. Specially crafted …

    akuity kargo github.com/akuity/kargo Go