Skip to content
OpenAdvisories

Package · Ubuntu

kraken

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.0
    CVE-2026-75625

    Kraken Agents Peer-to-Peer Download Cache Poisoning via Digest Verification Bypass

    Kraken agents fail to verify peer-to-peer downloaded blobs against their requested SHA-256 digest before committing to the content-addressable cache, relying only on CRC32 checksums for piece validation. Attackers on the agent-to-agent path or malicious peers…

    Uber Technologies kraken kraken Ubuntu
  • High 7.5
    CVE-2022-47747

    Kraken has arbitrary file read vulnerability via component testfs

    kraken <= 0.1.4 has an arbitrary file read vulnerability via the component testfs.

    kraken github.com/uber/kraken Ubuntu Go