GHSA-G7GW-M874-7RMF Kargo has Open Redirect in UI OIDC Login Flow via redirectTo Query Parameter

Summary The Kargo UI reads a redirectTo query parameter on the /login and /token-renew routes and, following a successful OIDC authentication, uses its value as the destination for client-side navigation. The parameter is treated as a path string but is not constrained to targets within the UI's...

EUVD-2026-28857

Kargo has Open Redirect in UI OIDC Login Flow via redirectTo Query Parameter...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: kubescape-server, vcluster-fips, helm-operator, cilium-cli, kube-mgmt-fips, consul-k8s, helm-set-status, crossplane-fips, zarf-fips, headlamp, linkerd2-fips, helm-mapkubeapis, kube-arangodb-fips, k8ssandra-client, argocd-image-updater-fips, ratify,...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: grafana-agent-operator, zot, certificate-transparency, rqlite, dex, sops, dagger, temporal, k8sgpt, melange, conftest, hubble-ui, gomplate, grpc-health-probe, cilium-cli, opentelemetry-collector, kubernetes-csi-driver-hostpath, kubernetes-csi-external-provisioner,...

GO-2025-4017 vulnerabilities

Vulnerabilities for packages: frp, spegel, kubernetes-dns-node-cache, kubo, traefik, caddy, ipfs-cluster, kyverno-policy-reporter-ui, q, dkron, kargo, k3s, k8sgateway...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: zot, rancher-fleet, k8sgpt, helm-docs, pluto, linkerd2, cilium-cli, cluster-api-helm-controller, flux-source-controller, zarf, cerbos, helm-push, chartmuseum, helm-operator, chart-testing, flux-helm-controller, trivy, envoy-gateway, cert-manager-cmctl,...

GO-2025-4233 vulnerabilities

Vulnerabilities for packages: seaweedfs, frp, spegel, kubernetes-dns-node-cache, kubo, traefik, caddy, buf, ipfs-cluster, q, dkron, kargo, k3s, k8sgateway...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: zot, flux, gptscript, dagger, gitea, gitsign, k8sgpt, kubescape, melange, scorecard, tfsec, timoni, wolfictl, flux-kustomize-controller, kubevela, task, snyk-cli, goreleaser, flux-source-controller, osv-scanner, bom, zarf, argocd-image-updater, nuclei, argo-events,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: zot, flux, gptscript, dagger, gitea, gitsign, k8sgpt, kubescape, melange, scorecard, tfsec, timoni, wolfictl, flux-kustomize-controller, kubevela, task, snyk-cli, goreleaser, flux-source-controller, osv-scanner, bom, zarf, argocd-image-updater, nuclei, argo-events,...

GO-2025-3830 vulnerabilities

Vulnerabilities for packages: zot, dagger, falcoctl, wolfictl, melange, docker-cli-buildx, nerdctl, aws-otel-collector, trufflehog, opentelemetry-collector, goreleaser, osv-scanner, openfga, zarf, splunk-otel-collector, buf, opentelemetry-collector-contrib, trivy, cadvisor, buildkitd, syft,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: zot, rancher-fleet, steampipe, flux, gptscript, dagger, gitea, gitsign, kubescape, scorecard, melange, tfsec, wolfictl, gomplate, kubevela, trufflehog, snyk-cli, xeol, flux-source-controller, nfpm, gitlab-runner, bom, osv-scanner, gitaly, witness, zarf,...

GO-2025-3525 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, opentelemetry-collector, argo-workflows, argo-rollouts, nats, grafana-alloy, k8sgpt, splunk-otel-collector, kubeflow-pipelines, kargo, amazon-cloudwatch-agent...

GO-2024-2659 vulnerabilities

Vulnerabilities for packages: zot, aactl, ko, dagger, kubescape, wolfictl, melange, conftest, cilium-cli, up, buf, tkn, ctop, crossplane, trivy, cadvisor, buildkitd, syft, docker-compose, spire-server, kargo, grype, kaniko...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: steampipe, gptscript, cert-manager, ko, kine, gitea, buildah, scorecard, docker-cli-buildx, gomplate, podman, snyk-cli, crossplane-provider-aws-ec2, cosign, crossplane-provider-azure-storage, cilium, crossplane-provider-aws-cloudformation, crossplane-provider-aws-eks...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: rook, zot, actions-runner-controller, aactl, flux-image-reflector-controller, rabbitmq-messaging-topology-operator, crossplane-provider-azure-sql, flux-notification-controller, flux, gh, sops, terraform, falcoctl, kubescape, crossplane-provider-family-azure, gitsign,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-wafv2-fips, omnictl-multiarch-fips, kubescape-server, crossplane-provider-aws-directconnect-fips, crossplane-provider-aws-lexmodels, istio, argo-events, wolfictl, go-discover, gitlab-rails-ce, crossplane-provider-azure-web, cilium-cli,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-wafv2-fips, omnictl-multiarch-fips, kubescape-server, crossplane-provider-aws-directconnect-fips, crossplane-provider-aws-lexmodels, istio, argo-events, wolfictl, go-discover, gitlab-rails-ce, crossplane-provider-azure-web, cilium-cli,...

WordPress Kargo Takip plugin <= 1.2 - Unauthenticated Server-Side Request Forgery vulnerability

Unauthenticated Server-Side Request Forgery vulnerability discovered by Eason - The University of Sydney in WordPress Plugin Kargo Takip versions = 1.2...

CVE-2026-12095

The Kargo Takip plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.2 via the 'apiurl' parameter. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be...

CVE-2026-12095

The CVE-2026-12095 entry concerns the WordPress plugin Kargo Takip (versions up to 1.2). It describes an unauthenticated Server-Side Request Forgery (SSRF) via the api_url parameter, enabling an attacker to cause the application to make web requests to arbitrary locations from within the web app....