github.com/oam-dev/kubevela
The Modern Application Platform.
View on Github
Activity
- Latest release
- 1mo ago
- Total releases
- 61
- Cadence
- ~15 days
- Last 12 months
- 13
Reach
- Stars
- 7.9k
Details
- First release
- Jul 17, 2020
| Version | Released | |
|---|---|---|
v1.11.0
minor
|
v1.11.0
minor
Dependencies (94)
+ 86 more |
|
v1.11.0-alpha.6
pre
|
v1.11.0-alpha.6
pre
Dependencies (94)
+ 86 more |
|
v1.11.0-alpha.5
pre
|
v1.11.0-alpha.5
pre
Dependencies (94)
+ 86 more |
|
v1.11.0-alpha.4
pre
|
v1.11.0-alpha.4
pre
Dependencies (94)
+ 86 more |
|
v1.9.14
patch
|
v1.9.14
patch
Dependencies (92)
+ 84 more |
|
v1.10.9
patch
|
v1.10.9
patch
Dependencies (93)
+ 85 more |
|
v1.11.0-alpha.3
pre
1 CVE
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev |
v1.11.0-alpha.3
pre
Dependencies (94)
+ 86 more |
|
v1.10.8
patch
1 CVE
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev |
v1.10.8
patch
Dependencies (93)
+ 85 more |
|
v1.11.0-alpha.2
pre
1 CVE
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev |
v1.11.0-alpha.2
pre
Dependencies (94)
+ 86 more |
|
v1.11.0-alpha.1
pre
1 CVE
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev |
v1.11.0-alpha.1
pre
Dependencies (94)
+ 86 more |
|
v1.10.7
patch
1 CVE
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev |
v1.10.7
patch
Dependencies (93)
+ 85 more |
|
v1.10.6
patch
1 CVE
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev |
v1.10.6
patch
Dependencies (93)
+ 85 more |
|
v1.10.5
patch
1 CVE
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev |
v1.10.5
patch
Dependencies (93)
+ 85 more |
|
v1.10.4
patch
1 CVE
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev |
v1.10.4
patch
Dependencies (93)
+ 85 more |
|
v1.10.3
patch
1 CVE
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev |
v1.10.3
patch
Dependencies (94)
+ 86 more |
|
v1.10.2
patch
1 CVE
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev |
v1.10.2
patch
Dependencies (93)
+ 85 more |
|
v1.10.1
minor
1 CVE
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev |
v1.10.1
minor
Dependencies (93)
+ 85 more |
|
v1.10.0
minor
1 CVE
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev |
v1.10.0
minor
Dependencies (93)
+ 85 more |
|
v1.10.0-alpha.1
pre
1 CVE
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev |
v1.10.0-alpha.1
pre
Dependencies (92)
+ 84 more |
|
v1.9.13
patch
1 CVE
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev |
v1.9.13
patch
Dependencies (92)
+ 84 more |
|
v1.9.5
patch
1 CVE
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev |
v1.9.5
patch
Dependencies (92)
+ 84 more |
|
v1.9.2
minor
1 CVE
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev |
v1.9.2
minor
Dependencies (91)
+ 83 more |
|
v1.8.1
minor
1 CVE
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev |
v1.8.1
minor
Dependencies (103)
+ 95 more |
|
v1.7.7
patch
1 CVE
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev |
v1.7.7
patch
Dependencies (116)
+ 108 more |
|
v1.7.6
patch
1 CVE
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev |
v1.7.6
patch
Dependencies (116)
+ 108 more |
|
v1.7.4
minor
1 CVE
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev |
v1.7.4
minor
Dependencies (116)
+ 108 more |
|
v1.6.7
patch
1 CVE
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev |
v1.6.7
patch
Dependencies (117)
+ 109 more |
|
v1.6.6
patch
1 CVE
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev |
v1.6.6
patch
Dependencies (117)
+ 109 more |
|
v1.7.0-alpha.1
pre
1 CVE
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev |
v1.7.0-alpha.1
pre
Dependencies (116)
+ 108 more |
|
v1.6.2
patch
1 CVE
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev |
v1.6.2
patch
Dependencies (119)
+ 111 more |
|
v1.6.1
minor
1 CVE
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev |
v1.6.1
minor
Dependencies (119)
+ 111 more |
|
v1.6.0-alpha.5
pre
1 CVE
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev |
v1.6.0-alpha.5
pre
Dependencies (117)
+ 109 more |
|
v1.6.0-alpha.4
pre
1 CVE
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev |
v1.6.0-alpha.4
pre
Dependencies (110)
+ 102 more |
|
v1.4.12
patch
2 CVEs
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev
CVE-2022-39383
GO-2022-1113
GHSA-m5xf-x7q6-3rm7
Dec 07, 2022
Server-side request forgery in github.com/oam-dev/kubevela When using Helm Chart as the component delivery method, the request address of the warehouse is not restricted, and there is a blind SSRF vulnerability. Fixed in
1.5.8
1.6.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.4.12
patch
Dependencies (97)
+ 89 more |
|
v1.5.3
minor
2 CVEs
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev
CVE-2022-39383
GO-2022-1113
GHSA-m5xf-x7q6-3rm7
Dec 07, 2022
Server-side request forgery in github.com/oam-dev/kubevela When using Helm Chart as the component delivery method, the request address of the warehouse is not restricted, and there is a blind SSRF vulnerability. Fixed in
1.5.8
1.6.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.5.3
minor
Dependencies (106)
+ 98 more |
|
v1.6.0-alpha.1
pre
1 CVE
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev |
v1.6.0-alpha.1
pre
Dependencies (108)
+ 100 more |
|
v1.3.8
patch
2 CVEs
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev
CVE-2022-39383
GO-2022-1113
GHSA-m5xf-x7q6-3rm7
Dec 07, 2022
Server-side request forgery in github.com/oam-dev/kubevela When using Helm Chart as the component delivery method, the request address of the warehouse is not restricted, and there is a blind SSRF vulnerability. Fixed in
1.5.8
1.6.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.3.8
patch
Dependencies (86)
+ 78 more |
|
v1.5.0-beta.2
pre
2 CVEs
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev
CVE-2022-39383
GO-2022-1113
GHSA-m5xf-x7q6-3rm7
Dec 07, 2022
Server-side request forgery in github.com/oam-dev/kubevela When using Helm Chart as the component delivery method, the request address of the warehouse is not restricted, and there is a blind SSRF vulnerability. Fixed in
1.5.8
1.6.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.5.0-beta.2
pre
Dependencies (105)
+ 97 more |
|
v1.4.8
patch
2 CVEs
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev
CVE-2022-39383
GO-2022-1113
GHSA-m5xf-x7q6-3rm7
Dec 07, 2022
Server-side request forgery in github.com/oam-dev/kubevela When using Helm Chart as the component delivery method, the request address of the warehouse is not restricted, and there is a blind SSRF vulnerability. Fixed in
1.5.8
1.6.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.4.8
patch
Dependencies (97)
+ 89 more |
|
v1.4.7
minor
2 CVEs
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev
CVE-2022-39383
GO-2022-1113
GHSA-m5xf-x7q6-3rm7
Dec 07, 2022
Server-side request forgery in github.com/oam-dev/kubevela When using Helm Chart as the component delivery method, the request address of the warehouse is not restricted, and there is a blind SSRF vulnerability. Fixed in
1.5.8
1.6.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.4.7
minor
Dependencies (97)
+ 89 more |
|
v1.5.0-alpha.3
pre
2 CVEs
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev
CVE-2022-39383
GO-2022-1113
GHSA-m5xf-x7q6-3rm7
Dec 07, 2022
Server-side request forgery in github.com/oam-dev/kubevela When using Helm Chart as the component delivery method, the request address of the warehouse is not restricted, and there is a blind SSRF vulnerability. Fixed in
1.5.8
1.6.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.5.0-alpha.3
pre
Dependencies (104)
+ 96 more |
|
v1.3.7
patch
2 CVEs
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev
CVE-2022-39383
GO-2022-1113
GHSA-m5xf-x7q6-3rm7
Dec 07, 2022
Server-side request forgery in github.com/oam-dev/kubevela When using Helm Chart as the component delivery method, the request address of the warehouse is not restricted, and there is a blind SSRF vulnerability. Fixed in
1.5.8
1.6.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.3.7
patch
Dependencies (86)
+ 78 more |
|
v1.3.5
minor
2 CVEs
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev
CVE-2022-39383
GO-2022-1113
GHSA-m5xf-x7q6-3rm7
Dec 07, 2022
Server-side request forgery in github.com/oam-dev/kubevela When using Helm Chart as the component delivery method, the request address of the warehouse is not restricted, and there is a blind SSRF vulnerability. Fixed in
1.5.8
1.6.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.3.5
minor
Dependencies (86)
+ 78 more |
|
v1.3.0-beta.2
pre
2 CVEs
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev
CVE-2022-39383
GO-2022-1113
GHSA-m5xf-x7q6-3rm7
Dec 07, 2022
Server-side request forgery in github.com/oam-dev/kubevela When using Helm Chart as the component delivery method, the request address of the warehouse is not restricted, and there is a blind SSRF vulnerability. Fixed in
1.5.8
1.6.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.3.0-beta.2
pre
Dependencies (84)
+ 76 more |
|
v1.2.0-rc.2
pre
2 CVEs
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev
CVE-2022-39383
GO-2022-1113
GHSA-m5xf-x7q6-3rm7
Dec 07, 2022
Server-side request forgery in github.com/oam-dev/kubevela When using Helm Chart as the component delivery method, the request address of the warehouse is not restricted, and there is a blind SSRF vulnerability. Fixed in
1.5.8
1.6.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.2.0-rc.2
pre
Dependencies (79)
+ 71 more |
|
v1.2.0-rc.1
pre
2 CVEs
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev
CVE-2022-39383
GO-2022-1113
GHSA-m5xf-x7q6-3rm7
Dec 07, 2022
Server-side request forgery in github.com/oam-dev/kubevela When using Helm Chart as the component delivery method, the request address of the warehouse is not restricted, and there is a blind SSRF vulnerability. Fixed in
1.5.8
1.6.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.2.0-rc.1
pre
Dependencies (79)
+ 71 more |
|
v1.2.0-beta.1
pre
2 CVEs
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev
CVE-2022-39383
GO-2022-1113
GHSA-m5xf-x7q6-3rm7
Dec 07, 2022
Server-side request forgery in github.com/oam-dev/kubevela When using Helm Chart as the component delivery method, the request address of the warehouse is not restricted, and there is a blind SSRF vulnerability. Fixed in
1.5.8
1.6.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.2.0-beta.1
pre
Dependencies (79)
+ 71 more |
|
v1.1.13
patch
2 CVEs
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev
CVE-2022-39383
GO-2022-1113
GHSA-m5xf-x7q6-3rm7
Dec 07, 2022
Server-side request forgery in github.com/oam-dev/kubevela When using Helm Chart as the component delivery method, the request address of the warehouse is not restricted, and there is a blind SSRF vulnerability. Fixed in
1.5.8
1.6.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.1.13
patch
Dependencies (69)
+ 61 more |
|
v1.1.9
patch
2 CVEs
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev
CVE-2022-39383
GO-2022-1113
GHSA-m5xf-x7q6-3rm7
Dec 07, 2022
Server-side request forgery in github.com/oam-dev/kubevela When using Helm Chart as the component delivery method, the request address of the warehouse is not restricted, and there is a blind SSRF vulnerability. Fixed in
1.5.8
1.6.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.1.9
patch
Dependencies (69)
+ 61 more |
|
v1.1.8
patch
2 CVEs
CVE-2026-55108
GO-2026-6312
GHSA-fmgp-q6jx-gg3x
Sep 02, 2026
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela Fixed in
1.9.14
1.10.9
1.11.0-alpha.4
References
Updated Sep 02, 2026 · Source: OSV.dev
CVE-2022-39383
GO-2022-1113
GHSA-m5xf-x7q6-3rm7
Dec 07, 2022
Server-side request forgery in github.com/oam-dev/kubevela When using Helm Chart as the component delivery method, the request address of the warehouse is not restricted, and there is a blind SSRF vulnerability. Fixed in
1.5.8
1.6.1
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.1.8
patch
Dependencies (68)
+ 60 more |