KrakenD Blog

Posts about Security

Blog categories

KrakenD CE 3.0.4, EE 3.0.4 and EE 2.13.14 Update Released

Patch releases of KrakenD CE and EE that upgrade Go to 1.27.4 and CEL, plus quota, AI Gateway and plugin fixes in Enterprise.

KrakenD CE 3.0.3, EE 3.0.3 and EE 2.13.13 Update Released

Security patch releases of KrakenD CE and EE that upgrade Go JOSE and x/net, and fix a JWK cache collision in the CE JWT validator.

CVE-2026-98432: Linux Kernel Flaw Exposing KrakenD on Unpatched Hosts

Security Oct 30, 2026

A critical Linux kernel bug lets remote attackers target KrakenD on unpatched hosts. Patch the kernel, and disable MPTCP in KrakenD until you do.

KrakenD CE 3.0.2, EE 3.0.2 and EE 2.13.12 Update Released

Urgent patch releases of KrakenD CE and EE that distrust compromised eMudhra intermediate CAs, plus OpenAPI, AMQP and AI Gateway fixes.

KrakenD CE 3.0.1, EE 3.0.1 and EE 2.13.11 Update Released

Patch releases of KrakenD CE and EE addressing several Go CVEs, plus WebSocket compression and AI Gateway fixes in Enterprise.

KrakenD EE 2.13.10 update released

Patch release of KrakenD EE addressing CVE-2026-84445

KrakenD CE 2.13.11 and EE 2.13.9 update released

Patch release of KrakenD CE and EE upgrading Go to 1.26.8 and addressing several CVEs

KrakenD CE 2.13.10 and EE 2.13.8 update released

Patch release of KrakenD CE and EE upgrading Go to 1.26.7 to address an HTTP2 issue

KrakenD CE 2.13.9 and EE 2.13.7 update released

Patch release of KrakenD CE and EE upgrading Go to 1.25.13 to address several disclosed CVEs

KrakenD CE 2.13.8 and EE 2.13.6 update released

Patch release of KrakenD CE and EE upgrading Go to 1.25.12 to address several disclosed CVEs