We began by creating a model with the community version to assess its capabilities. Once we confirmed that this tool met our needs, we opted for an enterprise license. Simply to benefit from tools that facilitate integration into our model and address specific requirements of our architecture in terms of security, data transformation, and authentication management.
Nicolas Gabetty
Senior Engineer / Coop Atlantique
CVE-2026-32283
High
· CVSS 7.5
High ImpactThis CVE is exploitable in typical deployments. Upgrade to the fixed version as soon as possible.
Component
Go standard library (crypto/tls)
Disclosed
Apr 8, 2026
CVSS Score
7.5
crypto/tls package can enter a permanent deadlock when a TLS peer sends
multiple consecutive key update handshake messages. An attacker who can establish
a TLS connection to the server can trigger this condition, causing the connection
handler goroutine to stall indefinitely. Under sustained attack, this exhausts
available goroutines and file descriptors, resulting in denial of service.Community Edition
2.13.4
addresses this CVE
Affected CE versions
>= 2.0, < 2.13.4
Enterprise Edition
2.13.2
addresses this CVE
Affected EE versions
>= 2.0, < 2.13.2
Upgrade to the addressed version or later to remediate this vulnerability.
Stay up to date with KrakenD releases and important updates