Skip to content
OpenAdvisories

Product · go-kratos

kratos

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-6993

    go-kratos http.DefaultServeMux Fallback server.go NewServer confused deputy

    A security flaw has been discovered in go-kratos kratos up to 2.9.2. This impacts the function NewServer of the file transport/http/server.go of the component http.DefaultServeMux Fallback Handler. The manipulation results in unintended intermediary. The atta…

    go-kratos kratos github.com/go-kratos/kratos/v2 Go