io.kestra:kestra
Maven · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Kestra: Unauthenticated management/actuator endpoints exposed on port 8081 (/env, /loggers) bypass API basic-auth | io.kestra:kestra | Maven | Medium | Fix reported | |
| Kestra vulnerable to stored XSS via custom Markdown [[link]] attribute injection | io.kestra:kestra | Maven | High | Fix reported |