Skip to content
OpenAdvisories

Vendor

go-kratos

1 known vulnerabilities.

Products

kratos 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-6993

    go-kratos http.DefaultServeMux Fallback server.go NewServer confused deputy

    A security flaw has been discovered in go-kratos kratos up to 2.9.2. This impacts the function NewServer of the file transport/http/server.go of the component http.DefaultServeMux Fallback Handler. The manipulation results in unintended intermediary. The atta…

    go-kratos kratos github.com/go-kratos/kratos/v2 Go