Security: kumahq/kuma
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
kumactl connects to control plane without verifying TLS certificate when no CA is configuredGHSA-v95x-xhq5-4929 published
Jul 16, 2026 by bartsmyklaModerate -
kuma-dp connects to control plane without verifying TLS certificate when no CA is configuredGHSA-wvmp-6r4v-j6cv published
Jul 16, 2026 by bartsmyklaModerate -
Default kuma-cp leaks admin token cross-origin via CORS wildcard + LocalhostIsAdminGHSA-3vcp-chfh-f6r2 published
May 9, 2026 by bartsmyklaModerate -
CVE-2023-44487GHSA-9wmc-rg4h-28wv published
Oct 12, 2023 by lahabanaHigh