Skip to content
OpenAdvisories

Package · Go

github.com/oam-dev/kubevela

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.5
    CVE-2026-55108

    KubeVela Terraform remote loader DoS via unbounded file read

    KubeVela is an open source application delivery platform. Prior to 1.9.14, from 1.10.0-alpha.1 until 1.10.9, and from 1.11.0-alpha.1 until 1.11.0-alpha.4, the Terraform remote configuration loader in pkg/controller/utils/capability.go, GetTerraformConfigurati…

    kubevela kubevela github.com/oam-dev/kubevela Go
  • Medium 4.9
    CVE-2022-39383

    SSRF vulnerability in KubeVela VelaUX APIServer

    KubeVela is an open source application delivery platform. Users using the VelaUX APIServer could be affected by this vulnerability. When using Helm Chart as the component delivery method, the request address of the warehouse is not restricted, and there is a …

    kubevela kubevela github.com/oam-dev/kubevela Go