Skip to content
OpenAdvisories

Package · Go

github.com/kumahq/kuma

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    GHSA-9wmc-rg4h-28wv

    github.com/kumahq/kuma affected by CVE-2023-44487

    ### Impact Envoy and Go HTTP/2 protocol stack is vulnerable to the "Rapid Reset" class of exploits, which send a sequence of HEADERS frames optionally followed by RST_STREAM frames. This can be exercised if you use the builtin gateway and receive untrusted ht…

    github.com/kumahq/kuma Go