Skip to content
OpenAdvisories

Package · Go

github.com/oam-dev/kubevela

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.5
    CVE-2026-55108

    KubeVela Terraform remote loader DoS via unbounded file read

    KubeVela is an open source application delivery platform. Prior to 1.9.14, from 1.10.0-alpha.1 until 1.10.9, and from 1.11.0-alpha.1 until 1.11.0-alpha.4, the Terraform remote configuration loader in pkg/controller/utils/capability.go, GetTerraformConfigurati…

    kubevela kubevela github.com/oam-dev/kubevela Go