UNKNOWN Go
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela
GO-2026-6312 · CVE-2026-55108 · GHSA-fmgp-q6jx-gg3x
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela
References
- ADVISORY https://github.com/kubevela/kubevela/security/advisories/GHSA-fmgp-q6jx-gg3x
- WEB https://github.com/kubevela/kubevela/commit/65dedda40a69cc1eccf4072a4c835e5b9f13334e
- WEB https://github.com/kubevela/kubevela/commit/7a4e59b2958ce1cf031fafbc188d6fafe8fe4d2e
- WEB https://github.com/kubevela/kubevela/commit/f6a64398b5e0065c57c3a0fb6765dd3dc48c749d
- WEB https://github.com/kubevela/kubevela/pull/7191
- WEB https://github.com/kubevela/kubevela/pull/7192
- WEB https://github.com/kubevela/kubevela/releases/tag/v1.10.9
- WEB https://github.com/kubevela/kubevela/releases/tag/v1.11.0-alpha.4
- WEB https://github.com/kubevela/kubevela/releases/tag/v1.9.14
Ready to move
Start Securing
Free, no credit card | First findings in minutes