Affected by GO-2026-4515
and 2 other vulnerabilities
GO-2026-4515: Kargo has Missing Authorization Vulnerabilities in Approval & Promotion REST API Endpoints in github.com/akuity/kargo
GO-2026-4516: Kargo has an Authorization Bypass Vulnerability in Batch Resource Creation API Endpoints in github.com/akuity/kargo
GO-2026-4717: Kargo Vulnerable to SSRF in Promotion http/http-download Steps Enables Internal Network Access and Data Exfiltration in github.com/akuity/kargo
LimitCopy copies from the provided io.ReadCloser to dst up to the specified
limit. If the source exceeds the limit, it returns an error. It returns the
number of bytes copied or an error if any issues occur during copying.
LimitRead reads from the provided io.ReadCloser up to the specified limit.
If the body exceeds the limit, it returns an error. It returns the read
bytes or an error if any issues occur during reading.