Snapshot 256312
Normalized text
Scripts and page chrome removed; this is what change detection compares.
News KrakenD 3.0 Is Here: AI Router, Semantic Cache, and On-the-Fly Stream Manipulation News What Is an AI Gateway? Architecture, Controls and Use Cases News KrakenD CE 3.0.3, EE 3.0.3 and EE 2.13.13 Update Released News CVE-2026-98432: Linux Kernel Flaw Exposing KrakenD on Unpatched Hosts Open Source Enterprise AI Gateway E-Government Open Banking E-Commerce API Gateway Migration Monolith to Microservices AI Governance Paribu Case Study UniGroup Case Study Moniepoint Case Study Hivebrite Case Study Showpo Case Study Case studies Training & Certification Support Designer Community Playground Enterprise Playground About us Blog Partners Docs Compare Open Source VS Enterprise Contact Sales Downloads KrakenD played a vital role in our API transformation journey by protecting our business platforms boundary and exposing the business capabilities in a standard way to both internal and external audience. Stefano Leopizzi Enterprise Architecture / lastminute.com Security Advisories Track CVEs and security advisories that may affect KrakenD. We publish our assessment of each vulnerability, so your team has the information at hand. Check my version: Advisory ID Title Severity Status Affects Addressed In Disclosed BDSA-2026-33757 go-openapi/swag: Stack Overflow via Deeply Nested JSON High False Positive None Not affected Nov 4, 2026 CVE-2017-3204 x/crypto/ssh: Missing Default Host Key Verification Enables Man-in-the-Middle High False Positive None Not affected Nov 4, 2026 CVE-2018-17075 x/net/html: Parser Panic on Template Elements in Frameset Insertion Mode High False Positive None Not affected Nov 4, 2026 CVE-2018-17142 x/net/html: Parser Panic on Nested Templates Inside MathML High False Positive None Not affected Nov 4, 2026 CVE-2018-17143 x/net/html: Parser Panic on isindex Inside a Template Table Body High False Positive None Not affected Nov 4, 2026 CVE-2018-17846 x/net/html: Parser Infinite Loop on Nested Select Inside a MathML Table High False Positive None Not affected Nov 4, 2026 CVE-2018-17847 x/net/html: Parser Panic on Nested SVG Inside a Template High False Positive None Not affected Nov 4, 2026 CVE-2018-17848 x/net/html: Parser Panic on Formatting Element Inside a MathML Template High False Positive None Not affected Nov 4, 2026 CVE-2026-88031 MongoDB Go Driver: GridFS Chunk Deletion via Query Injection in File Identifier High False Positive None Not affected Nov 4, 2026 BDSA-2026-16933 x/image/tiff: Panic via Out-of-Bounds Strip Offset Medium False Positive None Not affected Nov 4, 2026 BDSA-2026-17353 x/image: Unbounded Memory Allocation When Decoding a Crafted Image Medium False Positive None Not affected Nov 4, 2026 BDSA-2026-17354 x/image/vp8: Panic via Mismatched Chunk Dimensions Medium False Positive None Not affected Nov 4, 2026 BDSA-2026-36001 html/template: Incorrect Escaping of Regular Expressions in JavaScript Literals Medium False Positive None Not affected Nov 4, 2026 BDSA-2026-37952 x/text: Excessive Resource Consumption in Punycode Encoding of Long Invalid Hostnames Medium False Positive None Not affected Nov 4, 2026 CVE-2026-107324 MongoDB Go Driver: Panic via Integer Overflow in BSON Value Length Handling Medium False Positive None Not affected Nov 4, 2026 CVE-2026-107325 MongoDB Go Driver: Out-of-Bounds Panic via Malformed BSON Array Length Medium False Positive None Not affected Nov 4, 2026 CVE-2026-81521 MongoDB Go Driver: Write Redirection via Unescaped Database Name in Client Bulk Write Medium False Positive None Not affected Nov 4, 2026 CVE-2026-116587 auth/validator: Go JOSE CPU Exhaustion via Oversized RSA Keys in Embedded JWKs High Advisory CE / EE CE 3.0.3 / EE 3.0.3, 2.13.13 Nov 2, 2026 CVE-2026-116585 auth/validator: Go JOSE Panic During CBC-HMAC Decryption of JWE Tokens Medium False Positive CE / EE CE 3.0.3 / EE 3.0.3, 2.13.13 Nov 2, 2026 CVE-2026-116586 auth/validator: Go JOSE Crash via Deeply Nested JSON in Token Parsing Medium Advisory CE / EE CE 3.0.3 / EE 3.0.3, 2.13.13 Nov 2, 2026 CVE-2026-78661 x/net/html: Quadratic Complexity When Coalescing Text Nodes Medium False Positive CE / EE CE 3.0.3 / EE 3.0.3, 2.13.13 Nov 2, 2026 CVE-2026-97045 x/net/html: Namespace Confusion When Rendering Raw Text in Foreign Content Medium False Positive CE / EE CE 3.0.3 / EE 3.0.3, 2.13.13 Nov 2, 2026 CVE-2026-111943 crypto/x509: TLS Impersonation via Compromised eMudhra Intermediate CA Keys Critical Advisory CE / EE CE 3.0.2 / EE 3.0.2, 2.13.12 Oct 20, 2026 CVE-2026-100349 kin-openapi: Nil Pointer Panic in ValidateResponse on Headers Declared with Content High False Positive EE only EE 3.0.2, 2.13.12 Oct 20, 2026 CVE-2026-100351 kin-openapi: ValidationHandler Security Requirement Bypass via Encoded Path Operation Confusion High False Positive EE only EE 3.0.2, 2.13.12 Oct 20, 2026 CVE-2026-100352 kin-openapi: Panic via YAML NaN and Infinity Values in OpenAPI 3.1 Request Validation High False Positive EE only EE 3.0.2, 2.13.12 Oct 20, 2026 CVE-2026-100353 kin-openapi: Nil Pointer Panic via Array Schemas Without Items in openapi3filter Decoders High False Positive EE only EE 3.0.2, 2.13.12 Oct 20, 2026 CVE-2026-100354 kin-openapi: Fatal Stack Overflow via Circular allOf, anyOf, or oneOf Schemas High False Positive EE only EE 3.0.2, 2.13.12 Oct 20, 2026 CVE-2026-100347 kin-openapi: Panic in Legacy Router via Non-Canonical HTTP Method on a Static Path Medium False Positive EE only EE 3.0.2, 2.13.12 Oct 20, 2026 CVE-2026-100348 kin-openapi: Spec Loader Panic via Self-Referential additionalProperties Reference Medium Advisory EE only EE 3.0.2, 2.13.12 Oct 20, 2026 CVE-2026-56857 os: Root.MkdirAll Follows Junctions Out of the Root on Windows Critical False Positive CE / EE CE 3.0.1 / EE 3.0.1, 2.13.11 Oct 13, 2026 CVE-2026-78663 net/http: HTTP/2 Receive Buffer Limit Bypass via Double Flow Control Refund Critical Advisory CE / EE CE 3.0.1 / EE 3.0.1, 2.13.11 Oct 13, 2026 CVE-2026-56866 net/http: HTTP/1 Client Connection Desynchronization After Rejected CONNECT High Advisory CE / EE CE 3.0.1 / EE 3.0.1, 2.13.11 Oct 13, 2026 CVE-2026-78659 net/http: HTTP/2 Server Memory Exhaustion via Declared Trailer Headers High Advisory CE / EE CE 3.0.1 / EE 3.0.1, 2.13.11 Oct 13, 2026 CVE-2026-78660 net/http: HTTP/2 Transport Accepts Malformed Framing Headers High Advisory CE / EE CE 3.0.1 / EE 3.0.1, 2.13.11 Oct 13, 2026 CVE-2026-78667 net/http: CPU Exhaustion via Unbounded Range Header Parsing High Advisory EE only EE 3.0.1, 2.13.11 Oct 13, 2026 CVE-2026-78669 net/http: HTTP/2 CPU Exhaustion via Repeated Initial Window Size Changes High Advisory CE / EE CE 3.0.1 / EE 3.0.1, 2.13.11 Oct 13, 2026 CVE-2026-94439 net/http: HTTP/1 Server Request Smuggling After 2xx CONNECT Response High False Positive CE / EE CE 3.0.1 / EE 3.0.1, 2.13.11 Oct 13, 2026 CVE-2026-94440 mime/multipart: Memory Limit Bypass via Oversized MIME Header Line High Advisory CE / EE CE 3.0.1 / EE 3.0.1, 2.13.11 Oct 13, 2026 CVE-2026-97031 crypto/tls: Memory Exhaustion via Repeated ECH Outer Extension References High False Positive CE / EE CE 3.0.1 / EE 3.0.1, 2.13.11 Oct 13, 2026 CVE-2026-97032 net/http: HTTP/2 Server Crash via HPACK Encoder Race on Table Size Updates High Advisory CE / EE CE 3.0.1 / EE 3.0.1, 2.13.11 Oct 13, 2026 CVE-2026-107386 amqp: Memory Exhaustion via Oversized Frame Before Connection Tuning Medium Advisory CE / EE CE 3.0.2 / EE 3.0.1, 2.13.11 Oct 13, 2026 CVE-2026-94444 cmd/go: Checksum Bypass for golang.org/fips140 via Malicious Module Proxy Medium False Positive CE / EE CE 3.0.1 / EE 3.0.1, 2.13.11 Oct 13, 2026 CVE-2026-94447 cmd/go: Checksum Database Bypass for golang.org/toolchain Downloads Medium False Positive CE / EE CE 3.0.1 / EE 3.0.1, 2.13.11 Oct 13, 2026 CVE-2026-94448 html/template: Incorrect Escaping After Consecutive Template Literal Expressions Medium False Positive CE / EE CE 3.0.1 / EE 3.0.1, 2.13.11 Oct 13, 2026 CVE-2026-97030 html/template: Incorrect Regexp Escaping After yield Keyword Medium False Positive CE / EE CE 3.0.1 / EE 3.0.1, 2.13.11 Oct 13, 2026 CVE-2026-81870 telemetry/opentelemetry: Collector Endpoint Disclosure in Internal Diagnostic Logs Low False Positive EE only EE 3.0.1, 2.13.11 Sep 16, 2026 CVE-2026-84445 grpc: xDS Server Panic via Missing Authority and Host Headers High False Positive EE only EE 2.13.10 Sep 14, 2026 CVE-2026-79921 amqp: Memory Exhaustion via Broker-Declared Oversized Content Frame High Advisory CE / EE CE 2.13.11 / EE 2.13.9 Sep 7, 2026 CVE-2026-84304 grpc: Heap Memory Exhaustion via Fragmented HTTP/2 DATA Frames High Advisory CE / EE CE 2.13.11 / EE 2.13.9 Sep 7, 2026 CVE-2026-56855 ssh: Connection Deadlock via Unhandled Messages on an Established Channel Medium False Positive CE / EE CE 2.13.11 / EE 2.13.9 Sep 7, 2026 CVE-2026-78662 ssh: Connection Deadlock via Request Flood on an Unconfirmed Channel Medium False Positive CE / EE CE 2.13.11 / EE 2.13.9 Sep 7, 2026 CVE-2026-33818 encoding/asn1: Stack Exhaustion via Unbounded Recursion in Unmarshal High Advisory CE / EE CE 2.13.9 / EE 2.13.7 Aug 14, 2026 CVE-2026-46600 x/net/dns/dnsmessage: Panic via Malformed SVCB/HTTPS Resource Record High False Positive CE / EE CE 2.13.9 / EE 2.13.7 Aug 14, 2026 CVE-2026-46603 x/image/vp8l: Excessive Memory Allocation via Unused Huffman Tree Groups High False Positive None Not affected Aug 14, 2026 CVE-2026-56859 encoding/xml: Stack Exhaustion via Depth Counter Reset in DecodeElement High Advisory CE / EE CE 2.13.9 / EE 2.13.7 Aug 14, 2026 CVE-2026-56860 net/url: Quadratic Complexity in resolvePath During URL Resolution High Advisory CE / EE CE 2.13.9 / EE 2.13.7 Aug 14, 2026 CVE-2026-56862 crypto/tls: Uncontrolled Key Derivation via Repeated KeyUpdate Messages High Advisory CE / EE CE 2.13.9 / EE 2.13.7 Aug 14, 2026 CVE-2026-41178 telemetry/opentelemetry: Denial of Service via Oversized Baggage Header Parsing Medium Advisory CE / EE CE 2.13.9 / EE 2.13.7 Aug 14, 2026 CVE-2026-56853 net/http: ReadHeaderTimeout Not Applied During Unencrypted HTTP/2 Preface Check Medium Advisory CE / EE CE 2.13.9 / EE 2.13.7 Aug 14, 2026 CVE-2026-56858 html/template: XSS via Early Unescaped Slash Closure Medium False Positive CE / EE CE 2.13.9 / EE 2.13.7 Aug 14, 2026 CVE-2026-56864 x/mod/sumdb: Module Content Injection via Colluding GOPROXY and GOSUMDB Low False Positive None Not affected Aug 14, 2026 CVE-2026-56865 x/mod/sumdb/tlog: Transparency Log Tile Verification Bypass via Malicious GOPROXY Low False Positive None Not affected Aug 14, 2026 GHSA-hrxh-6v49-42gf grpc: xDS Authorization Bypass, HTTP/2 Rapid Reset CPU Exhaustion and xDS Policy Panic High Advisory CE / EE CE 2.13.9 / EE 2.13.7 Jul 15, 2026 CVE-2026-39822 os: Root Escape via Symlink With Trailing Slash Medium False Positive CE / EE CE 2.13.8 / EE 2.13.6 Jul 8, 2026 CVE-2026-42505 crypto/tls: Encrypted Client Hello Privacy Leak via PSK in Outer ClientHello Low False Positive CE / EE CE 2.13.8 / EE 2.13.6 Jul 8, 2026 CVE-2026-46602 x/image/tiff: Unbounded Memory Allocation via Oversized Image Tiles High False Positive None Not affected Jun 25, 2026 CVE-2026-40898 quic-go: HTTP/3 Memory Exhaustion via Unbounded QPACK Trailer Decompression High False Positive CE / EE CE 2.13.8 / EE 2.13.6 Jun 17, 2026 CVE-2026-42504 mime: Denial of Service via Quadratic Complexity in MIME Header Decoding High Advisory CE / EE CE 2.13.7 / EE 2.13.5 Jun 3, 2026 CVE-2026-27145 crypto/x509: Denial of Service via Quadratic Complexity in Hostname Verification Medium Advisory CE / EE CE 2.13.7 / EE 2.13.5 Jun 3, 2026 CVE-2026-42507 net/textproto: Log Injection via Unescaped Input in Error Messages Medium Advisory CE / EE CE 2.13.7 / EE 2.13.5 Jun 3, 2026 CVE-2026-39821 x/net/idna: Punycode-Encoded Labels Bypass Hostname Security Checks Critical Advisory CE / EE CE 2.13.6 / EE 2.13.4 May 26, 2026 CVE-2026-25680 html: Denial of Service via Cubic Complexity During Tree Construction Medium False Positive CE / EE CE 2.13.6 / EE 2.13.4 May 26, 2026 CVE-2026-25681 html: XSS via Incorrect Handling of Character References in DOCTYPE Medium False Positive CE / EE CE 2.13.6 / EE 2.13.4 May 26, 2026 CVE-2026-27136 html: XSS via Duplicate Attributes Causing Mis-parsing Medium False Positive CE / EE CE 2.13.6 / EE 2.13.4 May 26, 2026 CVE-2026-39824 windows: Integer Overflow in NewNTUnicodeString Medium False Positive CE / EE CE 2.13.6 / EE 2.13.4 May 26, 2026 CVE-2026-39827 ssh: Memory Leak via Repeatedly Rejected Channels Enables Server DoS Medium False Positive CE / EE CE 2.13.6 / EE 2.13.4 May 26, 2026 CVE-2026-39828 ssh: Certificate Restrictions Bypass via PartialSuccessError Medium False Positive CE / EE CE 2.13.6 / EE 2.13.4 May 26, 2026 CVE-2026-39829 ssh: Denial of Service via Pathological RSA/DSA Key Parameters Medium False Positive CE / EE CE 2.13.6 / EE 2.13.4 May 26, 2026 CVE-2026-39830 ssh: Server Deadlock via Unsolicited Global Request Responses Medium False Positive CE / EE CE 2.13.6 / EE 2.13.4 May 26, 2026 CVE-2026-39831 ssh: FIDO/U2F Physical Interaction Requirement Bypass Medium False Positive CE / EE CE 2.13.6 / EE 2.13.4 May 26, 2026 CVE-2026-39832 ssh/agent: Destination Constraints Dropped When Forwarding Keys Medium False Positive CE / EE CE 2.13.6 / EE 2.13.4 May 26, 2026 CVE-2026-39833 ssh/agent: ConfirmBeforeUse Constraint Silently Not Enforced Medium False Positive CE / EE CE 2.13.6 / EE 2.13.4 May 26, 2026 CVE-2026-39834 ssh: Infinite Loop on Channel Writes Due to Integer Overflow Medium False Positive CE / EE CE 2.13.6 / EE 2.13.4 May 26, 2026 CVE-2026-39835 ssh: Server Panic When CertChecker Has No Authority Callbacks Medium False Positive CE / EE CE 2.13.6 / EE 2.13.4 May 26, 2026 CVE-2026-42502 html: XSS via HTML Elements in Foreign Content Medium False Positive CE / EE CE 2.13.6 / EE 2.13.4 May 26, 2026 CVE-2026-42506 html: XSS via Namespaced Elements in Foreign Content Medium False Positive CE / EE CE 2.13.6 / EE 2.13.4 May 26, 2026 CVE-2026-42508 ssh/knownhosts: @revoked Status Not Checked on CA SignatureKey Medium False Positive CE / EE CE 2.13.6 / EE 2.13.4 May 26, 2026 CVE-2026-46595 ssh: VerifiedPublicKeyCallback Skips Source-Address Validation Medium False Positive CE / EE CE 2.13.6 / EE 2.13.4 May 26, 2026 CVE-2026-46597 ssh: Byte Arithmetic Underflow in AES-GCM Packet Decoder Medium False Positive CE / EE CE 2.13.6 / EE 2.13.4 May 26, 2026 CVE-2026-46598 ssh/agent: Client Panic on Malformed ed25519 Wire Bytes Medium False Positive CE / EE CE 2.13.6 / EE 2.13.4 May 26, 2026 CVE-2026-32952 auth/ntlm: Process Crash via Malicious NTLM Challenge Message High Advisory EE only EE 2.13.3 May 11, 2026 CVE-2026-33811 net: Application Crash via Long CNAME DNS Response High Advisory CE / EE CE 2.13.5 / EE 2.13.3 May 11, 2026 CVE-2026-33814 net/http: Infinite Loop in HTTP/2 Transport via Zero SETTINGS_MAX_FRAME_SIZE High Advisory CE / EE CE 2.13.5 / EE 2.13.3 May 11, 2026 CVE-2026-42151 Prometheus: Azure AD OAuth Client Secret Exposed in Plaintext High False Positive CE / EE CE 2.13.5 / EE 2.13.3 May 11, 2026 CVE-2026-42154 Prometheus: Memory Exhaustion via Crafted Remote Read Request High False Positive CE / EE CE 2.13.5 / EE 2.13.3 May 11, 2026 CVE-2026-39817 cmd/go: go tool pack Does Not Sanitize Output Paths Medium False Positive CE / EE CE 2.13.5 / EE 2.13.3 May 11, 2026 CVE-2026-39819 cmd/go: go bug Follows Symlinks in Predictable Temporary Filenames Medium False Positive CE / EE CE 2.13.5 / EE 2.13.3 May 11, 2026 CVE-2026-39820 net/mail: Quadratic String Concatenation in consumeComment Medium False Positive CE / EE CE 2.13.5 / EE 2.13.3 May 11, 2026 CVE-2026-39823 html/template: Meta Content URL Escaping Bypass Causes XSS Medium False Positive CE / EE CE 2.13.5 / EE 2.13.3 May 11, 2026 CVE-2026-39825 net/http/httputil: ReverseProxy Forwards Hidden Query Parameters Medium Advisory CE / EE CE 2.13.5 / EE 2.13.3 May 11, 2026 CVE-2026-39826 html/template: Escaper Bypass Leads to Cross-Site Scripting Medium False Positive CE / EE CE 2.13.5 / EE 2.13.3 May 11, 2026 CVE-2026-39836 net: Panic in Dial and LookupPort on Windows via NUL Byte Medium False Positive CE / EE CE 2.13.5 / EE 2.13.3 May 11, 2026 CVE-2026-39882 telemetry/opentelemetry: OTLP HTTP Exporter Reads Unbounded Response Body Medium Advisory CE / EE CE 2.13.5 / EE 2.13.3 May 11, 2026 CVE-2026-40179 Prometheus: Stored XSS in Web UI via Metric Names and Label Values Medium False Positive CE / EE CE 2.13.5 / EE 2.13.3 May 11, 2026 CVE-2026-42499 net/mail: Quadratic String Concatenation in consumePhrase Medium False Positive CE / EE CE 2.13.5 / EE 2.13.3 May 11, 2026 CVE-2026-42501 cmd/go: Malicious Module Proxy Can Bypass Checksum Database Medium False Positive CE / EE CE 2.13.5 / EE 2.13.3 May 11, 2026 CVE-2026-27143 cmd/compile: Memory Corruption After Bound Check Elimination High False Positive CE / EE CE 2.13.4 / EE 2.13.2 Apr 8, 2026 CVE-2026-32283 crypto/tls: TLS Connection Deadlock via Key Update Flood High Advisory CE / EE CE 2.13.4 / EE 2.13.2 Apr 8, 2026 CVE-2026-34986 auth/validator: Go JOSE Panic via Empty Encrypted Key in JWE Key Wrapping High False Positive CE / EE CE 2.13.4 / EE 2.13.2 Apr 8, 2026 CVE-2026-27140 cmd/go: Trust Layer Bypass with cgo and SWIG Medium False Positive CE / EE CE 2.13.4 / EE 2.13.2 Apr 8, 2026 CVE-2026-27144 cmd/compile: No-op Interface Conversion Bypasses Overlap Checking Medium False Positive CE / EE CE 2.13.4 / EE 2.13.2 Apr 8, 2026 CVE-2026-32280 crypto/x509: Unexpected Work During Certificate Chain Building Medium Advisory CE / EE CE 2.13.4 / EE 2.13.2 Apr 8, 2026 CVE-2026-32281 crypto/x509: Inefficient Policy Validation Medium Advisory CE / EE CE 2.13.4 / EE 2.13.2 Apr 8, 2026 CVE-2026-32282 os: Root.Chmod Follows Symlinks Outside Root on Linux Medium False Positive CE / EE CE 2.13.4 / EE 2.13.2 Apr 8, 2026 CVE-2026-32288 archive/tar: Unbounded Memory Allocation in GNU Sparse Map Parsing Medium False Positive CE / EE CE 2.13.4 / EE 2.13.2 Apr 8, 2026 CVE-2026-32289 html/template: JS Template Literal Context Incorrectly Tracked Medium False Positive CE / EE CE 2.13.4 / EE 2.13.2 Apr 8, 2026 CVE-2026-33186 grpc: Authorization Bypass via Custom Interceptors or Per-RPC Plugins High False Positive CE / EE CE 2.13.3 / EE 2.13.1 Mar 19, 2026 CVE-2026-24051 telemetry/opentelemetry: Arbitrary Code Execution via Untrusted PATH on macOS High Advisory CE / EE CE 2.13.2 / EE 2.13.0 Mar 9, 2026 CVE-2026-25679 net/url: IPv6 Literal Validation Bypass Medium Advisory CE / EE CE 2.13.2 / EE 2.13.0 Mar 9, 2026 CVE-2026-27139 os: FileInfo Can Escape from a Root Medium Advisory CE / EE CE 2.13.2 / EE 2.13.0 Mar 9, 2026 CVE-2026-27142 html/template: URLs in Meta Content Attribute Not Escaped Medium False Positive CE / EE CE 2.13.2 / EE 2.13.0 Mar 9, 2026 CVE-2026-3206 backend/circuit-breaker: Uncontrolled Context Cancellation Causes Cascading Request Failures Medium Advisory CE / EE CE 2.13.1 / EE 2.12.5 Feb 18, 2026 CVE-2025-61732 cmd/cgo: Code Smuggling into cgo Binary via Comment Parsing Medium False Positive CE / EE CE 2.13.0 / EE 2.12.4 Feb 10, 2026 CVE-2025-68121 crypto/tls: TLS Session Key Mismanagement in Config.Clone and GetConfigForClient Medium Advisory CE / EE CE 2.13.0 / EE 2.12.4 Feb 10, 2026 CVE-2025-61731 cmd/go: CgoPkgConfig Flag Bypass Leads to Arbitrary Code Execution High False Positive CE / EE CE 2.12.1 / EE 2.12.3 Jan 16, 2026 CVE-2025-68119 cmd/go: VCS Toolchain Misinterpretation Enables Code Execution High False Positive CE / EE CE 2.12.1 / EE 2.12.3 Jan 16, 2026 CVE-2025-61726 net/http: Memory Exhaustion from Excessive Form Key-Value Pairs Medium Advisory CE / EE CE 2.12.1 / EE 2.12.3 Jan 16, 2026 CVE-2025-61728 archive/zip: Super-linear Filename Indexing Causes DoS on Malicious ZIPs Medium False Positive CE / EE CE 2.12.1 / EE 2.12.3 Jan 16, 2026 CVE-2025-61727 crypto/x509: Subdomain Exclusion Constraint Does Not Restrict Wildcard SANs Medium Advisory CE / EE CE 2.12.1 / EE 2.12.2 Dec 4, 2025 CVE-2025-61729 crypto/x509: Quadratic Runtime in HostnameError.Error via Malicious Certificate Medium Advisory CE / EE CE 2.12.1 / EE 2.12.2 Dec 4, 2025 CVE-2025-47914 x/crypto/ssh/agent: Panic via Malformed Identity Request Message Medium False Positive CE / EE CE 2.12.1 / EE 2.12.1 Nov 21, 2025 CVE-2025-58181 x/crypto/ssh: Memory Exhaustion via Unbounded GSSAPI Mechanism Count Medium False Positive CE / EE CE 2.12.1 / EE 2.12.1 Nov 21, 2025 CVE-2025-58187 crypto/x509: Name Constraint Validation Denial of Service via Quadratic Complexity High Advisory CE / EE CE 2.11.1 / EE 2.11.2 Oct 8, 2025 CVE-2025-58188 crypto/x509: Panic on Certificate Validation with DSA Public Keys High Advisory CE / EE CE 2.11.1 / EE 2.11.2 Oct 8, 2025 CVE-2025-61723 encoding/pem: Denial of Service via Quadratic Complexity on Invalid PEM Input High Advisory CE / EE CE 2.11.1 / EE 2.11.2 Oct 8, 2025 CVE-2025-58185 encoding/asn1: Memory Exhaustion via Malicious DER Payload Medium Advisory CE / EE CE 2.11.1 / EE 2.11.2 Oct 8, 2025 CVE-2025-58186 net/http: Memory Exhaustion via Unbounded Cookie Parsing Medium Advisory CE / EE CE 2.11.1 / EE 2.11.2 Oct 8, 2025 CVE-2025-58189 crypto/tls: Attacker-Controlled Text in ALPN Negotiation Error Medium Advisory CE / EE CE 2.11.1 / EE 2.11.2 Oct 8, 2025 CVE-2025-61724 net/textproto: CPU Exhaustion via Excessive HTTP Response Lines Medium Advisory CE / EE CE 2.11.1 / EE 2.11.2 Oct 8, 2025 CVE-2025-4674 cmd/go: Unexpected Command Execution via Untrusted VCS Repository Metadata High False Positive CE / EE CE 2.10.2 / EE 2.10.3 Jul 9, 2025 CVE-2025-22868 go-jose: Memory Exhaustion via Malformed Token Parsing High False Positive CE / EE CE 2.10.1 / EE 2.10.1 Jun 19, 2025 CVE-2025-22874 crypto/x509: Certificate Policy Validation Bypass via ExtKeyUsageAny High Advisory CE / EE CE 2.10.1 / EE 2.10.1 Jun 19, 2025 CVE-2025-4673 net/http: Proxy Header Leak on Cross-Origin Redirects Medium Advisory CE / EE CE 2.10.1 / EE 2.10.1 Jun 19, 2025 No advisories match your search. No advisories found This version is considered secure for production and does not have any associated advisory No results Try a different search term or clear the search to browse all advisories. Read our Security Policy to learn how KrakenD handles vulnerability disclosure and reporting. KrakenD is a CVE Numbering Authority (CNA). Stay up to date with KrakenD releases and important updates