News KrakenD 3.0 Is Here: AI Router, Semantic Cache, and On-the-Fly Stream Manipulation News KrakenD Partners with CGK Solutions to Secure API Integration in Italy Case Study Every Change Reviewed, Every Peak Absorbed: Paribu's API Gateway News KrakenD CE v3.0 Released
KrakenD played a vital role in our API transformation journey by protecting our business platforms boundary and exposing the business capabilities in a standard way to both internal and external audience.
Stefano Leopizzi
Enterprise Architecture / lastminute.com
CVE-2026-39824
CVE
Medium
False Positivegolang.org/x/sys/windows.NewNTUnicodeString in its
operation. This vulnerability is specific to Windows platform code paths that
KrakenD does not exercise. The dependency was upgraded as a precaution.Addressed through routine dependency maintenance in CE 2.13.6 and EE 2.13.4.
Component
golang.org/x/sys (Windows)
Disclosed
May 26, 2026
golang.org/x/sys/windows package causes
NewNTUnicodeString to return a truncated string instead of an error when the
input exceeds the maximum representable length. Applications relying on this
function for path or string construction may silently receive incorrect values.Stay up to date with KrakenD releases and important updates