argo-rollouts vulnerabilities

CVEs whose affected-version data names the argo-rollouts package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-82277Critical· 9.8

4w ago

Argo Rollouts dashboard through 1.10.0 binds to all interfaces and exposes mutating Rollout operations without authentication, authorization, or CSRF protection

Argo Rollouts dashboard through 1.10.0 binds to all interfaces and exposes mutating Rollout operations without authentication, authorization, or CSRF protection. Attackers on the same network can invoke PromoteRollout, AbortRollout, Rest…

▾ Midnightargoproj · argo-rolloutsEPSS 0.78%via NVD