Skip to content

io.kestra:kestra vulnerabilities (Maven)

2 vulnerabilities.

io.kestra:kestra MavenKestra: Stored XSS via custom Markdown [[link]] attribute injectionCVE-2026-55839Fix available8.7 HighAugust 18, 2026
io.kestra:kestra MavenKestra: Unauthenticated management/actuator endpoints exposed on port 8081 (/env, /loggers) bypass API basic-authCVE-2026-73245Fix available6.5 MediumAugust 11, 2026