News KrakenD 3.0 Is Here: AI Router, Semantic Cache, and On-the-Fly Stream Manipulation News KrakenD Partners with CGK Solutions to Secure API Integration in Italy Case Study Every Change Reviewed, Every Peak Absorbed: Paribu's API Gateway News KrakenD CE v3.0 Released
We began by creating a model with the community version to assess its capabilities. Once we confirmed that this tool met our needs, we opted for an enterprise license. Simply to benefit from tools that facilitate integration into our model and address specific requirements of our architecture in terms of security, data transformation, and authentication management.
Nicolas Gabetty
Senior Engineer / Coop Atlantique
CVE-2025-61727
CVE
Medium
· CVSS 5.3
Medium ImpactThis vulnerability can affect KrakenD under specific conditions. Review the affected versions below and upgrade if your deployment is exposed.
Component
Go standard library (crypto/x509)
Disclosed
Dec 4, 2025
CVSS Score
5.3
crypto/x509 certificate chain validator does not enforce excluded-subdomain
constraints against wildcard Subject Alternative Names (SANs) in leaf certificates.
A constraint excluding test.example.com does not prevent a leaf certificate from
claiming the SAN *.example.com, allowing a certificate that should be restricted
to be accepted as valid for subdomains it was explicitly excluded from.Community Edition
2.12.1
addresses this advisory
Affected CE versions
>= 2.0, < 2.12.1
Enterprise Edition
2.12.2
addresses this advisory
Affected EE versions
>= 2.0, < 2.12.2
Upgrade to the addressed version or later to remediate this vulnerability.
Stay up to date with KrakenD releases and important updates