Product by Go
Github.com/kumahq/kuma
6 known vulnerabilities in Github.com/kumahq/kuma (Go), 0 of them actively exploited (CISA KEV).
Key figures
6
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2026-52724 | kuma-dp connects to control plane without verifying TLS certificate when no CA is configured | — | |
| Medium | CVE-2026-50166 | Kuma: kumactl connects to control plane without verifying TLS certificate when no CA is configured | — | |
| Medium | CVE-2026-18676 | Kong Mesh: Permissive Cross-domain Security Policy with Untrusted Domains | — | |
| Medium | CVE-2026-18679 | Kong Mesh: Improper Certificate Validation | — | |
| Medium | CVE-2026-18678 | Kong Mesh: Improper Certificate Validation | — | |
| Medium | CVE-2026-45021 | Kuma: Default kuma-cp leaks admin token cross-origin via CORS wildcard + LocalhostIsAdmin | — |