Skip to content
OpenAdvisories

Vendor

kubevela

3 known vulnerabilities.

Products

kubevela 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.5
    CVE-2026-55108

    KubeVela Terraform remote loader DoS via unbounded file read

    KubeVela is an open source application delivery platform. Prior to 1.9.14, from 1.10.0-alpha.1 until 1.10.9, and from 1.11.0-alpha.1 until 1.11.0-alpha.4, the Terraform remote configuration loader in pkg/controller/utils/capability.go, GetTerraformConfigurati…

    kubevela kubevela github.com/oam-dev/kubevela Go
  • High 8.2
    CVE-2022-36089

    VelaUX APIServer vulnerable to Authentication Bypass by Capture-replay

    KubeVela is an application delivery platform Users using KubeVela's VelaUX APIServer could be affected by an authentication bypass vulnerability. In KubeVela prior to versions 1.4.11 and 1.5.4, VelaUX APIServer uses the `PlatformID` as the signed key to gener…

    kubevela kubevela