https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T14:30:36.030691+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-82277 fkie_cve-2026-82277 2026-09-28T14:30:36.243680+00:00

Argo Rollouts dashboard through 1.10.0 binds to all interfaces and exposes mutating Rollout operations without authentication, authorization, or CSRF protection. Attackers on the same network can invoke PromoteRollout, AbortRollout, RestartRollout, SetRolloutImage, UndoRollout, and RetryRollout operations across all namespaces accessible to the operator's kubeconfig.

 https://vulnerability.circl.lu/vuln/ghsa-366v-5xmx-36vh GHSA-366v-5xmx-36vh 2026-09-28T14:30:36.243944+00:00

Argo Rollouts dashboard through 1.10.0 binds to all interfaces and exposes mutating Rollout operations without authentication, authorization, or CSRF protection. Attackers on the same network can invoke PromoteRollout, AbortRollout, RestartRollout, SetRolloutImage, UndoRollout, and RetryRollout operations across all namespaces accessible to the operator's kubeconfig.