github.com/kumahq/kuma
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| kuma-dp connects to control plane without verifying TLS certificate when no CA is configured | github.com/kumahq/kuma/v2github.com/kumahq/kuma | Go | Medium | Fix reported | |
| kumactl connects to control plane without verifying TLS certificate when no CA is configured | github.com/kumahq/kuma/v2github.com/kumahq/kuma | Go | Medium | Fix reported | |
| Default kuma-cp leaks admin token cross-origin via CORS wildcard + LocalhostIsAdmin | github.com/kumahq/kuma | Go | Medium | Fix reported | |
| github.com/kumahq/kuma affected by CVE-2023-44487 | github.com/kumahq/kuma | Go | High | Fix reported |