CVE-2026-55108
2 advisories.
Go/github.com/oam-dev/kubevela CVE-2026-55108: high 8.5, EPSS 0.75%
KubeVela Terraform remote loader DoS via unbounded file read
Action: Upgrade github.com/oam-dev/kubevela to 1.9.14 or later.
go get github.com/oam-dev/kubevela@v1.9.14go get github.com/oam-dev/kubevela@v1.10.9go get github.com/oam-dev/kubevela@v1.11.0-alpha.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.9.14 | - |
| 1.10.0-alpha.1 | 1.10.9 | - |
| 1.11.0-alpha.1 | 1.11.0-alpha.4 | - |
Fixed versions
| 1.9.14 | 1.10.9 | 1.11.0-alpha.4 |
Sources
- osv: GHSA-fmgp-q6jx-gg3x
- https://github.com/kubevela/kubevela/security/advisories/GHSA-fmgp-q6jx-gg3x
- https://github.com/kubevela/kubevela/pull/7191
- https://github.com/kubevela/kubevela/pull/7192
- https://github.com/kubevela/kubevela/commit/65dedda40a69cc1eccf4072a4c835e5b9f13334e
- https://github.com/kubevela/kubevela/commit/7a4e59b2958ce1cf031fafbc188d6fafe8fe4d2e
- https://github.com/kubevela/kubevela/commit/f6a64398b5e0065c57c3a0fb6765dd3dc48c749d
- https://github.com/kubevela/kubevela
- https://github.com/kubevela/kubevela/releases/tag/v1.10.9
- https://github.com/kubevela/kubevela/releases/tag/v1.11.0-alpha.4
- https://github.com/kubevela/kubevela/releases/tag/v1.9.14
CVE-2026-55108 · published · modified · JSON
Go/github.com/oam-dev/kubevela CVE-2026-55108: unknown, EPSS 0.75%
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela
Action: Upgrade github.com/oam-dev/kubevela to 1.9.14 or later.
go get github.com/oam-dev/kubevela@v1.9.14go get github.com/oam-dev/kubevela@v1.10.9go get github.com/oam-dev/kubevela@v1.11.0-alpha.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.9.14 | - |
| 1.10.0-alpha.1 | 1.10.9 | - |
| 1.11.0-alpha.1 | 1.11.0-alpha.4 | - |
Fixed versions
| 1.9.14 | 1.10.9 | 1.11.0-alpha.4 |
Sources
- osv: GO-2026-6312
- https://github.com/kubevela/kubevela/security/advisories/GHSA-fmgp-q6jx-gg3x
- https://github.com/kubevela/kubevela/commit/65dedda40a69cc1eccf4072a4c835e5b9f13334e
- https://github.com/kubevela/kubevela/commit/7a4e59b2958ce1cf031fafbc188d6fafe8fe4d2e
- https://github.com/kubevela/kubevela/commit/f6a64398b5e0065c57c3a0fb6765dd3dc48c749d
- https://github.com/kubevela/kubevela/pull/7191
- https://github.com/kubevela/kubevela/pull/7192
- https://github.com/kubevela/kubevela/releases/tag/v1.10.9
- https://github.com/kubevela/kubevela/releases/tag/v1.11.0-alpha.4
- https://github.com/kubevela/kubevela/releases/tag/v1.9.14
CVE-2026-55108 · published · modified · JSON