Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
akuity/kargo
main @ 5b02ab5
34
Fixes
0
CVEs
HIGH
Peak severity
34.6%
Coverage
Highlights
Auth Bypass: 15 prior fixes. Scrutinize any change in this area.
charts/kargo/templates/users/cluster-roles.yaml: most-fixed (2 issues). Treat as high-risk during review.
25 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Authorization relied on replaying raw bearer tokens instead of verified identity, allowing token replay to escalate privileges.
Privilege Escalation: RBAC resource creation/update lacked escalation checks, role normalization failed to resolve API groups, and OIDC claim annotations were amended rather than replaced, allowing stale claims to grant elevated permissions.
Auth Bypass: Admin token issuer was hardcoded, and unauthenticated credential injection allowed arbitrary bearer tokens to gain Kubernetes access.