kubevela | Snyk

Direct Vulnerabilities

Known vulnerabilities in the kubevela package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L NULL Pointer Dereference	<1.11.0-r22
L Improper Check for Unusual or Exceptional Conditions	<1.11.0-r22
L GHSA-vrcc-3ch7-hppw	<1.11.0-r22
L GHSA-g8cf-rcjf-c8cf	<1.11.0-r22
L GHSA-rj39-cv6w-8wv7	<1.11.0-r22
L Uncontrolled Recursion	<1.11.0-r22
L Authentication Bypass	<1.11.0-r21
L NULL Pointer Dereference	<1.11.0-r21
L GHSA-fh4f-47mf-f2gj	<1.11.0-r21
L GHSA-23vg-4cjm-66q5	<1.11.0-r21
L GHSA-mh7x-f8wq-4jhx	<1.11.0-r21
L Improper Input Validation	<1.11.0-r21
L CVE-2026-78663	<1.11.0-r19
L CVE-2026-97030	<1.11.0-r18
L CVE-2026-56866	<1.11.0-r18
L CVE-2026-97032	<1.11.0-r19
L CVE-2026-78669	<1.11.0-r19
L CVE-2026-94439	<1.11.0-r18
L GHSA-f5vf-8pvc-394g	<1.11.0-r18
L GHSA-wpfx-qch4-q5j2	<1.11.0-r18
L CVE-2026-94440	<1.11.0-r18
L CVE-2026-94448	<1.11.0-r18
L CVE-2026-78659	<1.11.0-r19
L GHSA-hq7w-2xrq-wp2j	<1.11.0-r18
L CVE-2026-97031	<1.11.0-r18
L CVE-2026-78660	<1.11.0-r19
L GHSA-874m-fcc5-9gqf	<1.11.0-r18
L GHSA-2gfw-j3c5-j46w	<1.11.0-r18
L GHSA-22jx-p735-qcpm	<1.11.0-r18
L GHSA-pg57-6jwg-q645	<1.11.0-r17
L Resource Exhaustion	<1.11.0-r17
L GHSA-8wmf-6v46-5gfg	<1.11.0-r16
L Information Exposure	<1.11.0-r16
L Resource Exhaustion	<1.11.0-r15
L GHSA-7jxh-36q5-gcqv	<1.11.0-r15
L GHSA-2v4p-qf9q-27wj	<1.11.0-r14
L Improper Validation of Array Index	<1.11.0-r14
L CVE-2026-56855	<1.11.0-r13
L CVE-2026-78662	<1.11.0-r13
L Resource Exhaustion	<1.11.0-r12
L GHSA-vp52-pcj8-j9qc	<1.11.0-r12
L GHSA-gjhq-gjfw-99mq	<1.11.0-r9
L CVE-2026-56854	<1.11.0-r9
L GHSA-w67g-5rqw-f597	<1.11.0-r8
L CVE-2026-33818	<1.11.0-r5
L CVE-2026-56860	<1.11.0-r5
L GHSA-w2q5-6q6x-x959	<1.11.0-r5
L CVE-2026-56858	<1.11.0-r5
L GHSA-xc2p-8ggw-6cr5	<1.11.0-r5
L GHSA-xphw-4f88-5f39	<1.11.0-r5
L GHSA-25mv-j2qr-v5jq	<1.11.0-r5
L CVE-2026-56859	<1.11.0-r5
L CVE-2026-39821	<1.11.0-r5
L GHSA-7qch-w8m5-g3h3	<1.11.0-r5
L CVE-2026-56862	<1.11.0-r5
L GHSA-76p8-fhrm-vpc7	<1.11.0-r5
L CVE-2026-56853	<1.11.0-r5
L GHSA-c974-w86c-vpfw	<1.11.0-r5
L NULL Pointer Dereference	<1.11.0-r3
L GHSA-hc8v-wwc9-vgxm	<1.11.0-r4
L Link Following	<1.11.0-r4
L GHSA-qgq7-7hm3-q39j	<1.11.0-r4
L Directory Traversal	<1.11.0-r4
L GHSA-r277-6w6q-xmqw	<1.11.0-r3
L GHSA-jpcw-4wr7-c3vq	<1.11.0-r3
L CVE-2026-56852	<1.11.0-r2
L GHSA-jpjm-c3r5-q96r	<1.11.0-r2
L GHSA-hrxh-6v49-42gf	<1.11.0-r1
L GHSA-ff52-ph69-cf7x	<1.10.9-r1
L CVE-2026-42505	<1.10.9-r1
L GHSA-33vj-92qq-66hc	<1.10.9-r0
L Symlink Following	<1.10.9-r0
L GHSA-rgh6-rfwx-v388	<1.10.9-r0
L CVE-2026-50195	<1.10.9-r0
L GHSA-cvxm-645q-p574	<1.10.9-r0
L Improper Input Validation	<1.10.9-r0
L Uncontrolled Memory Allocation	<1.10.8-r12
L GHSA-5wrp-cwcj-q835	<1.10.8-r12
L GHSA-jpcc-p29g-p8mq	<1.10.8-r11
L CVE-2026-47262	<1.10.8-r11
L Improper Input Validation	<1.10.8-r11
L GHSA-xhf5-7wjv-pqxp	<1.10.8-r11
L CVE-2026-42507	<1.10.8-r10
L CVE-2026-27145	<1.10.8-r10
L GHSA-h524-452v-82p9	<1.10.8-r10
L GHSA-h3gm-q7m7-mp28	<1.10.8-r10
L CVE-2026-42504	<1.10.8-r10
L GHSA-4279-q6mj-392r	<1.10.8-r10
L GHSA-fqw6-gf59-qr4w	<1.10.8-r8
L Improper Privilege Management	<1.10.8-r8
C Improper Encoding or Escaping of Output	<1.10.8-r7
L GHSA-m7cr-m3pv-hgrp	<1.10.8-r7
L Directory Traversal	<1.10.8-r7
L GHSA-crhj-59gh-8x96	<1.10.8-r7
H Incorrect Behavior Order: Validate Before Canonicalize	<1.10.8-r6
L GHSA-389r-gv7p-r3rp	<1.10.8-r6
L GHSA-qf3q-3h68-mmh2	<1.10.8-r5
L Improper Encoding or Escaping of Output	<1.10.8-r5
L GHSA-qc64-m6c2-v4x7	<1.10.8-r5
M Link Following	<1.10.8-r5
L GHSA-xq5j-9r39-c3vf	<1.10.8-r5
H Allocation of Resources Without Limits or Throttling	<1.10.8-r5
H Loop with Unreachable Exit Condition ('Infinite Loop')	<1.10.8-r5
L GHSA-p9h5-jm8x-mjm5	<1.10.8-r5
M Out-of-bounds Write	<1.10.8-r5
L GHSA-2283-wf8c-rw8r	<1.10.8-r5
L GHSA-8g2r-hhvj-mv99	<1.10.8-r5
L CVE-2026-39825	<1.10.8-r5
L CVE-2026-42501	<1.10.8-r5
H NULL Pointer Dereference	<1.10.8-r5
H Double Free	<1.10.8-r5
L GHSA-497x-jcxf-m478	<1.10.8-r5
L GHSA-5m4p-2gjx-p2g8	<1.10.8-r5
L Cross-site Scripting (XSS)	<1.10.8-r5
L CVE-2026-42499	<1.10.8-r5
L GHSA-3v2c-x6q9-f697	<1.10.8-r5
L GHSA-h74g-238j-357m	<1.10.8-r5
H Insufficiently Protected Credentials	<1.10.8-r3
L GHSA-3xc5-wrhm-f963	<1.10.8-r3
L Allocation of Resources Without Limits or Throttling	<1.10.8-r2
L GHSA-pc3f-x583-g7j2	<1.10.8-r2
H Untrusted Search Path	<1.10.8-r1
L GHSA-hfvc-g4fc-pqhx	<1.10.8-r1
L Improper Validation of Array Index	<1.10.7-r5
L Integer Underflow	<1.10.7-r6
L GHSA-jhf3-xxhw-2wpp	<1.10.7-r6
L Improper Validation of Array Index	<1.10.7-r6
L GHSA-gm2x-2g9h-ccm8	<1.10.7-r6
L GHSA-6g7g-w4f8-9c9x	<1.10.7-r5
L GHSA-p77j-4mvh-x3m3	<1.10.7-r4
L Improper Authorization	<1.10.7-r4
L GHSA-rv83-g57w-fr8j	<1.10.7-r3
L GHSA-j3gx-2473-5fp8	<1.10.7-r3
L Directory Traversal	<1.10.7-r3
L Direct Request ('Forced Browsing')	<1.10.7-r3
L Cross-site Scripting (XSS)	<1.10.7-r3
L GHSA-j4j7-vw47-rhfq	<1.10.7-r3
L Untrusted Search Path	<1.10.7-r2
L GHSA-9h8m-3fm2-qjrq	<1.10.7-r2
L GHSA-q9hv-hpm4-hj6x	<1.10.7-r1
C CVE-2026-1229	<1.10.7-r1
L GHSA-37cx-329c-33x3	<1.10.6-r3
M Improper Validation of Integrity Check Value	<1.10.6-r3
L GHSA-h355-32pf-p2xm	<1.10.6-r2
L GHSA-8jvr-vh7g-f8gx	<1.10.6-r2
C CVE-2025-68121	<1.10.6-r2
L CVE-2025-61732	<1.10.6-r2
L GHSA-6v2p-p543-phr9	<1.10.2-r1
L GHSA-hcg3-q754-cr77	<1.10.2-r2
L CVE-2025-47914	<1.10.5-r1
L GHSA-f6x5-jh6r-wrfv	<1.10.5-r1
L CVE-2025-58181	<1.10.5-r1
L GHSA-j5w8-q4qc-rx2x	<1.10.5-r1
M Memory Leak	<1.10.4-r3
H Incorrect Execution-Assigned Permissions	<1.10.4-r3
L CVE-2025-58186	<1.10.4-r2
L Allocation of Resources Without Limits or Throttling	<1.10.4-r2
L Information Exposure Through Log Files	<1.10.4-r2
L CVE-2025-47912	<1.10.4-r2
L Allocation of Resources Without Limits or Throttling	<1.10.4-r2
L Algorithmic Complexity	<1.10.4-r2
L CVE-2025-58183	<1.10.4-r2
L Allocation of Resources Without Limits or Throttling	<1.10.4-r2
L Improper Certificate Validation	<1.10.4-r2
L CVE-2025-61725	<1.10.4-r2
L Race Condition	<1.10.3-r9
L GHSA-j5pm-7495-qmr3	<1.10.3-r9
L GHSA-62jj-gr2r-5c34	<1.10.3-r6
L CVE-2025-22874	<1.10.3-r6
L CVE-2025-4673	<1.10.3-r6
L GHSA-6f52-wpx2-hvf2	<1.10.3-r6
L CVE-2025-22872	<1.10.2-r6
L CVE-2025-22871	<1.10.2-r5
M Open Redirect	<1.10.2-r4
H Integer Overflow or Wraparound	<1.10.2-r4
L CVE-2025-22870	<1.10.2-r3
L CVE-2025-22869	<1.10.2-r2
L CVE-2025-22868	<1.10.2-r1
L CVE-2025-22866	<1.10.0-r0
H Use of Uninitialized Resource	<1.10.0-r0
M Directory Traversal	<1.10.0-r0
L CVE-2024-45336	<1.9.13-r7
L CVE-2024-45341	<1.9.13-r7
L Resource Exhaustion	<1.9.13-r6
L Arbitrary Argument Injection	<1.9.13-r6
L CVE-2024-45338	<1.9.13-r5
L CVE-2024-45337	<1.9.13-r3
L CVE-2024-36623	<1.9.13-r2
L CVE-2024-36621	<1.9.13-r2
L CVE-2024-34158	<1.9.11-r7
L CVE-2024-34156	<1.9.11-r7
L CVE-2024-34155	<1.9.11-r7
L CVE-2024-24791	<1.9.11-r6
M Information Exposure Through Log Files	<1.9.11-r5
M CVE-2024-24789	<1.9.11-r4
C CVE-2024-24790	<1.9.11-r4
L CVE-2023-45288	<1.9.11-r1
L CVE-2024-24786	<1.9.10-r0
L CVE-2024-24783	<1.9.9-r2
L CVE-2024-24785	<1.9.9-r2
L CVE-2023-45290	<1.9.9-r2
L CVE-2023-45289	<1.9.9-r2
L CVE-2024-24784	<1.9.9-r2
H Origin Validation Error	<1.9.9-r1
M Improper Validation of Specified Quantity in Input	<1.9.9-r0
H CVE-2023-49568	<1.9.7-r4
H CVE-2023-47108	<1.9.7-r3
H Allocation of Resources Without Limits or Throttling	<1.9.7-r3
H Allocation of Resources Without Limits or Throttling	<1.9.6-r4
H CVE-2023-44487	<1.9.6-r4
M Cross-site Scripting (XSS)	<1.9.6-r4

Vulnerability

Vulnerable Version

NULL Pointer Dereference

<1.11.0-r22

Improper Check for Unusual or Exceptional Conditions

<1.11.0-r22

GHSA-vrcc-3ch7-hppw

<1.11.0-r22

GHSA-g8cf-rcjf-c8cf

<1.11.0-r22

GHSA-rj39-cv6w-8wv7

<1.11.0-r22

Uncontrolled Recursion

<1.11.0-r22

Authentication Bypass

<1.11.0-r21

NULL Pointer Dereference

<1.11.0-r21

GHSA-fh4f-47mf-f2gj

<1.11.0-r21

GHSA-23vg-4cjm-66q5

<1.11.0-r21

GHSA-mh7x-f8wq-4jhx

<1.11.0-r21

Improper Input Validation

<1.11.0-r21

<1.11.0-r19

<1.11.0-r18

<1.11.0-r18

<1.11.0-r19

<1.11.0-r19

<1.11.0-r18

<1.11.0-r18

<1.11.0-r18

<1.11.0-r18

<1.11.0-r18

<1.11.0-r19

<1.11.0-r18

<1.11.0-r18

<1.11.0-r19

<1.11.0-r18

<1.11.0-r18

<1.11.0-r18

<1.11.0-r17

<1.11.0-r17

<1.11.0-r16

<1.11.0-r16

<1.11.0-r15

<1.11.0-r15

<1.11.0-r14

Improper Validation of Array Index

<1.11.0-r14

<1.11.0-r13

<1.11.0-r13

<1.11.0-r12

<1.11.0-r12

<1.11.0-r9

<1.11.0-r9

<1.11.0-r8

<1.11.0-r5

<1.11.0-r5

<1.11.0-r5

<1.11.0-r5

<1.11.0-r5

<1.11.0-r5

<1.11.0-r5

<1.11.0-r5

<1.11.0-r5

<1.11.0-r5

<1.11.0-r5

<1.11.0-r5

<1.11.0-r5

<1.11.0-r5

NULL Pointer Dereference

<1.11.0-r3

<1.11.0-r4

<1.11.0-r4

<1.11.0-r4

<1.11.0-r4

<1.11.0-r3

<1.11.0-r3

<1.11.0-r2

<1.11.0-r2

<1.11.0-r1

<1.10.9-r1

<1.10.9-r1

<1.10.9-r0

<1.10.9-r0

<1.10.9-r0

<1.10.9-r0

<1.10.9-r0

Improper Input Validation

<1.10.9-r0

Uncontrolled Memory Allocation

<1.10.8-r12

GHSA-5wrp-cwcj-q835

<1.10.8-r12

GHSA-jpcc-p29g-p8mq

<1.10.8-r11

CVE-2026-47262

<1.10.8-r11

Improper Input Validation

<1.10.8-r11

<1.10.8-r11

<1.10.8-r10

<1.10.8-r10

<1.10.8-r10

<1.10.8-r10

<1.10.8-r10

<1.10.8-r10

<1.10.8-r8

Improper Privilege Management

<1.10.8-r8

Improper Encoding or Escaping of Output

<1.10.8-r7

GHSA-m7cr-m3pv-hgrp

<1.10.8-r7

Directory Traversal

<1.10.8-r7

GHSA-crhj-59gh-8x96

<1.10.8-r7

Incorrect Behavior Order: Validate Before Canonicalize

<1.10.8-r6

GHSA-389r-gv7p-r3rp

<1.10.8-r6

GHSA-qf3q-3h68-mmh2

<1.10.8-r5

Improper Encoding or Escaping of Output

<1.10.8-r5

GHSA-qc64-m6c2-v4x7

<1.10.8-r5

Link Following

<1.10.8-r5

GHSA-xq5j-9r39-c3vf

<1.10.8-r5

Allocation of Resources Without Limits or Throttling

<1.10.8-r5

Loop with Unreachable Exit Condition ('Infinite Loop')

<1.10.8-r5

<1.10.8-r5

<1.10.8-r5

<1.10.8-r5

<1.10.8-r5

<1.10.8-r5

<1.10.8-r5

NULL Pointer Dereference

<1.10.8-r5

Double Free

<1.10.8-r5

GHSA-497x-jcxf-m478

<1.10.8-r5

GHSA-5m4p-2gjx-p2g8

<1.10.8-r5

Cross-site Scripting (XSS)

<1.10.8-r5

CVE-2026-42499

<1.10.8-r5

GHSA-3v2c-x6q9-f697

<1.10.8-r5

GHSA-h74g-238j-357m

<1.10.8-r5

Insufficiently Protected Credentials

<1.10.8-r3

GHSA-3xc5-wrhm-f963

<1.10.8-r3

Allocation of Resources Without Limits or Throttling

<1.10.8-r2

GHSA-pc3f-x583-g7j2

<1.10.8-r2

Untrusted Search Path

<1.10.8-r1

GHSA-hfvc-g4fc-pqhx

<1.10.8-r1

Improper Validation of Array Index

<1.10.7-r5

Integer Underflow

<1.10.7-r6

GHSA-jhf3-xxhw-2wpp

<1.10.7-r6

Improper Validation of Array Index

<1.10.7-r6

GHSA-gm2x-2g9h-ccm8

<1.10.7-r6

GHSA-6g7g-w4f8-9c9x

<1.10.7-r5

GHSA-p77j-4mvh-x3m3

<1.10.7-r4

Improper Authorization

<1.10.7-r4

GHSA-rv83-g57w-fr8j

<1.10.7-r3

GHSA-j3gx-2473-5fp8

<1.10.7-r3

Directory Traversal

<1.10.7-r3

Direct Request ('Forced Browsing')

<1.10.7-r3

Cross-site Scripting (XSS)

<1.10.7-r3

GHSA-j4j7-vw47-rhfq

<1.10.7-r3

Untrusted Search Path

<1.10.7-r2

<1.10.7-r2

<1.10.7-r1

<1.10.7-r1

<1.10.6-r3

Improper Validation of Integrity Check Value

<1.10.6-r3

<1.10.6-r2

<1.10.6-r2

<1.10.6-r2

<1.10.6-r2

<1.10.2-r1

<1.10.2-r2

<1.10.5-r1

<1.10.5-r1

<1.10.5-r1

<1.10.5-r1

<1.10.4-r3

Incorrect Execution-Assigned Permissions

<1.10.4-r3

CVE-2025-58186

<1.10.4-r2

Allocation of Resources Without Limits or Throttling

<1.10.4-r2

Information Exposure Through Log Files

<1.10.4-r2

CVE-2025-47912

<1.10.4-r2

Allocation of Resources Without Limits or Throttling

<1.10.4-r2

Algorithmic Complexity

<1.10.4-r2

CVE-2025-58183

<1.10.4-r2

Allocation of Resources Without Limits or Throttling

<1.10.4-r2

Improper Certificate Validation

<1.10.4-r2

<1.10.4-r2

<1.10.3-r9

<1.10.3-r9

<1.10.3-r6

<1.10.3-r6

<1.10.3-r6

<1.10.3-r6

<1.10.2-r6

<1.10.2-r5

<1.10.2-r4

Integer Overflow or Wraparound

<1.10.2-r4

<1.10.2-r3

<1.10.2-r2

<1.10.2-r1

<1.10.0-r0

Use of Uninitialized Resource

<1.10.0-r0

<1.10.0-r0

<1.9.13-r7

<1.9.13-r7

<1.9.13-r6

Arbitrary Argument Injection

<1.9.13-r6

<1.9.13-r5

<1.9.13-r3

<1.9.13-r2

<1.9.13-r2

<1.9.11-r7

<1.9.11-r7

<1.9.11-r7

<1.9.11-r6

Information Exposure Through Log Files

<1.9.11-r5

<1.9.11-r4

<1.9.11-r4

<1.9.11-r1

<1.9.10-r0

<1.9.9-r2

<1.9.9-r2

<1.9.9-r2

<1.9.9-r2

<1.9.9-r2

Origin Validation Error

<1.9.9-r1

Improper Validation of Specified Quantity in Input

<1.9.9-r0

CVE-2023-49568

<1.9.7-r4

CVE-2023-47108

<1.9.7-r3

Allocation of Resources Without Limits or Throttling

<1.9.7-r3

Allocation of Resources Without Limits or Throttling

<1.9.6-r4

CVE-2023-44487

<1.9.6-r4

Cross-site Scripting (XSS)

<1.9.6-r4