Read the docs

KrakenD

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

KrakenD records in CISA KEV

No KrakenD vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Krakend 1 record LOW

Records

2 records

TI-2022-01432 CVE-2022-1561 · GHSA-mj97-cwp5-r4v9

Crafted backend URLs in Lura Project

Priority LOW 21

Lura and KrakenD-CE versions older than v2.0.2 and KrakenD-EE versions older than v2.0.0 do not sanitize URL parameters correctly, allowing a malicious user to alter the backend URL defined for a pipe when remote users s…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0059 Published 2022-08-01 Fixed in v2.0.2, v2.0.0 CWE-471
TI-2026-02769 CVE-2026-3206 · GHSA-wmg2-7qv4-gfgx

Improper management of context cancelations

Priority LOW 8

Improper Resource Shutdown or Release vulnerability in KrakenD, SLU KrakenD-CE (CircuitBreaker modules), KrakenD, SLU KrakenD-EE (CircuitBreaker modules).

CVSS 4.0LOW 1.3 Network Low privileges No interaction EPSS 0.00272 Published 2026-02-25 Fixed in 2.13.1, 2.12.5 CWE-404
Open these records in search →