Kubevela vulnerabilities

Products

• Kubevela 3

Newest

• kubevela KubeVela Terraform remote loader DoS via unbounded file read CVE-2026-55108 Fix available 8.5 HighAugust 28, 2026
• kubevela SSRF vulnerability in KubeVela VelaUX APIServer CVE-2022-39383 Fix available 4.9 MediumNovember 16, 2022
• kubevela VelaUX APIServer vulnerable to Authentication Bypass by Capture-replay CVE-2022-36089 8.2 HighSeptember 7, 2022