Kuma Control Plane DoS via Malformed JWT kid (CWE-704)
Security Advisory
Medium
Kuma
Affected:
- github.com/kumahq/kuma/v2 (Go) >= 2.7.29, < 2.9.19
- github.com/kumahq/kuma/v2 (Go) >= 2.10.0, < 2.11.18
- github.com/kumahq/kuma/v2 (Go) >= 2.12.0, < 2.12.14
- github.com/kumahq/kuma/v2 (Go) >= 2.13.0, < 2.13.10
- github.com/kumahq/kuma/v2 (Go) >= 2.14.0, < 2.14.2
Fixed in:
- 2.9.19
- 2.11.18
- 2.12.14
- 2.13.10
- 2.14.2
Referenced CVEs:
CVE-2026-18675 · 5.3
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.