KrakenD CE v2.13 released
by Jorge Tarrero
KrakenD CE v2.13 delivers JSON schema library upgrade to support validation using more recent drafts, advanced service shutdown control, and several bug fixes and security updates
JSON schema library upgrade
The internal JSON schema dependency that handles the request validation has been upgraded to a more maintaned library, which, among other improvements, includes support for draft-04, draft-06, draft-07, 2019-09 (new) and 2020-12 (new)
This update might change how the validation errors are rendered and returned to client. Check our documentation page on JSON schema validation for requests for more information.
Shutdown control
With the new max_shutdown_wait_time option, you can now control how long you want to wait for KrakenD to wait until the external connections have been closed. This is rather useful to gracefully terminate connections to external services (via plugins) or slow/batch-style upstreams.
🚀 Summary of changes for CEv2.13
Upgraded the JSON schema library to support more recent drafts, service shutdown control, and several bug fixes and security updates.
- The JSON schema library was replaced to a more maintained one, supporting draft-04, draft-06, draft-07, 2019-09 (new) and 2020-12 (new)
-
Added a
max_shutdown_wait_timeproperty to stop waiting for connection draining after a defined timespan. -
Fixed a bug in
krakend-josethat could lead to slow startup times in services with a big number (thousands) of enddpoints - The runtime context is now properly propagated in client plugins, allowing to use it for service shutdown, among others.
- Upgraded Go to 1.25.7 addressing several CVEs with disclosed descriptions:
- CVE-2025-61732 A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary
- CVE-2025-68121 Config.GetConfigForClient is documented to use the original Config’s session ticket keys unless explicitly overridden. This can cause unexpected behavior if the returned Config modifies authentication parameters
Upgrading to the latest version is always advised.
Happy gatewaying! 🐙