kargo vulnerabilities

CVEs whose affected-version data names the kargo package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-61850Critical· 9.3

1w ago

Kargo: Privilege escalation via Project RBAC management in the Kargo API

Kargo manages and automates the promotion of software artifacts. From 0.6.0 until 1.8.14, 1.9.9, and 1.10.8, two authorization flaws in the `project-scoped RBAC API` let an authenticated user with delegated permission to manage a Project…

▾ Midnightakuity · kargoEPSS 0.36%via CVEORG