Skip to content

Go-kratos Kratos vulnerabilities

go-kratos kratosgo-kratos http.DefaultServeMux Fallback server.go NewServer confused deputyCVE-2026-69936.9 MediumApril 25, 2026
go-kratos kratosOry Kratos has a SQL injection via forged pagination tokensCVE-2026-33503Fix available7.2 HighMarch 20, 2026
go-kratos kratosOry Kratos's `highest_available` setting does not properly respect code + mfa credentialsCVE-2024-45042Fix available4.4 MediumSeptember 26, 2024