News KrakenD 3.0 Is Here: AI Router, Semantic Cache, and On-the-Fly Stream Manipulation News KrakenD Partners with CGK Solutions to Secure API Integration in Italy Case Study Every Change Reviewed, Every Peak Absorbed: Paribu's API Gateway News KrakenD CE v3.0 Released

Products
Community Edition
Open Source API Gateway Free to use The high-performance open source API gateway, free to use and trusted by thousands of teams.
Enterprise Edition
API Gateway Enterprise-Grade with SLAs Production-grade gateway with security, governance, and 24/7 support backed by SLAs.
AI Gateway Same Gateway, Now for AI LLM routing, prompt guardrails, token budgets, and a built-in MCP server, all from one gateway.
KrakenD played a vital role in our API transformation journey by protecting our business platforms boundary and exposing the business capabilities in a standard way to both internal and external audience.
Stefano Leopizzi
Enterprise Architecture, lastminute.com
Compare Open Source VS Enterprise
Contact Sales Watch a demo
Solutions
By Industry
E-Government
Open Banking
E-Commerce
By Use Case
API Gateway Migration
Monolith to Microservices
AI Governance
Case Studies
Paribu
UniGroup
Moniepoint
Hivebrite
Showpo
See all case studies »
KrakenD played a vital role in our API transformation journey by protecting our business platforms boundary and exposing the business capabilities in a standard way to both internal and external audience.
Stefano Leopizzi
Enterprise Architecture, lastminute.com
Compare Open Source VS Enterprise
Contact Sales Watch a demo
Resources
Knowledge Hub
Training & Certification
Documentation
Support
Security Advisories
Developer Tools
Designer
Community Playground
Enterprise Playground
Company
About us
Blog
I don't need to think about KrakenD, it just works.
Dave McPherson
Platform Engineering Lead, Culture Amp
Compare Open Source VS Enterprise
Contact Sales Watch a demo
Partners
Docs

Partners
Docs
Compare Open Source VS Enterprise
Contact Sales
Downloads
KrakenD allowed us to focus on our backend and deploy a secure and performant system in a few days. After more than 2 years of use in production and 0 crash or malfunction, it also has proven its robustness
Jonathan Muller
CTO / Openroom Inc.

CVE-2025-68119 CVE High · CVSS 7.5 False Positive

cmd/go: VCS Toolchain Misinterpretation Enables Code Execution

This advisory does not affect KrakenD

This is a build-time vulnerability in the Go toolchain (cmd/go). KrakenD distributes pre-compiled binaries and does not invoke the Go toolchain at runtime. End users running KrakenD as a gateway are not affected.

Addressed through routine dependency maintenance in CE 2.12.1 and EE 2.12.3.

Component

Go standard library (cmd/go)

Disclosed

Jan 16, 2026

CVSS Score

7.5

Description

Go’s cmd/go command misinterprets version control system (VCS) repository metadata when resolving module paths. A specially constructed repository can cause go get or related toolchain commands to execute unintended code or write files outside the module cache, enabling supply-chain attacks against developer environments.

References

View CVE-2025-68119 on Go Issue Tracker

Stay up to date with KrakenD releases and important updates