Vulnerabilities
CVE-2026-27111 - Kargo has Missing Authorization Vulnerabilities in Approval & Promotion REST API...
CVE ID : CVE-2026-27111 Published : Feb. 20, 2026, 10:16 p.m. | 44 minutes ago Description : Kargo manages and automates the promotion of software artifacts. From v1.9.0 to v1.9.2, Kargo's authorization model includes a promote verb -- a non-standard Kubernetes