GO-2026-6312
- Source
- https://pkg.go.dev/vuln/GO-2026-6312
- Import Source
- https://vuln.go.dev/ID/GO-2026-6312.json
- JSON Data
- https://api.osv.dev/v1/vulns/GO-2026-6312
- Aliases
- Published
- 2026-09-02T18:37:27Z
- Modified
- 2026-09-02T19:30:09Z
- Summary
- KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela
- Details
-
KubeVela Terraform remote loader DoS via unbounded file read in github.com/oam-dev/kubevela
- Database specific
{ "review_status": "UNREVIEWED", "url": "https://pkg.go.dev/vuln/GO-2026-6312" }- References
-
- https://github.com/kubevela/kubevela/security/advisories/GHSA-fmgp-q6jx-gg3x
- https://github.com/kubevela/kubevela/commit/65dedda40a69cc1eccf4072a4c835e5b9f13334e
- https://github.com/kubevela/kubevela/commit/7a4e59b2958ce1cf031fafbc188d6fafe8fe4d2e
- https://github.com/kubevela/kubevela/commit/f6a64398b5e0065c57c3a0fb6765dd3dc48c749d
- https://github.com/kubevela/kubevela/pull/7191
- https://github.com/kubevela/kubevela/pull/7192
- https://github.com/kubevela/kubevela/releases/tag/v1.10.9
- https://github.com/kubevela/kubevela/releases/tag/v1.11.0-alpha.4
- https://github.com/kubevela/kubevela/releases/tag/v1.9.14
Affected packages
Go / github.com/oam-dev/kubevela
Package
- Name
- github.com/oam-dev/kubevela
- View open source insights on deps.dev
- Purl
- pkg:golang/github.com/oam-dev/kubevela