News KrakenD CE 2.13.9 and EE 2.13.7 update released

Products
Community Edition
Open Source API Gateway Free to use The high-performance open source API gateway, free to use and trusted by thousands of teams.
Enterprise Edition
API Gateway Enterprise-Grade with SLAs Production-grade gateway with security, governance, and 24/7 support backed by SLAs.
AI Gateway Same Gateway, Now for AI LLM routing, prompt guardrails, token budgets, and a built-in MCP server, all from one gateway.
We began by creating a model with the community version to assess its capabilities. Once we confirmed that this tool met our needs, we opted for an enterprise license. Simply to benefit from tools that facilitate integration into our model and address specific requirements of our architecture in terms of security, data transformation, and authentication management.
Nicolas Gabetty
Senior Engineer, Coop Atlantique
Compare Open Source VS Enterprise
Contact Sales Watch a demo
Solutions
E-Government
For Governments & Public Sector
Modernize citizen services with fully on-prem, air-gapped APIs, without compromising data sovereignty.
Open Banking
For Banks & Financial Institutions
Expose open banking APIs with strict governance, predictable performance, and zero loss of control.
E-Commerce
For Digital Commerce Platforms
Increase conversions and scale traffic safely with low-latency APIs built for revenue-critical workloads.
We began by creating a model with the community version to assess its capabilities. Once we confirmed that this tool met our needs, we opted for an enterprise license. Simply to benefit from tools that facilitate integration into our model and address specific requirements of our architecture in terms of security, data transformation, and authentication management.
Nicolas Gabetty
Senior Engineer, Coop Atlantique
More industries and real-world examples: Case studies
Contact Sales Watch a demo
Resources
Knowledge Hub
Training & Certification
Documentation
Support
Security Advisories
Developer Tools
Designer
Community Playground
Enterprise Playground
Company
About us
Blog
We began by creating a model with the community version to assess its capabilities. Once we confirmed that this tool met our needs, we opted for an enterprise license. Simply to benefit from tools that facilitate integration into our model and address specific requirements of our architecture in terms of security, data transformation, and authentication management.
Nicolas Gabetty
Senior Engineer, Coop Atlantique
Compare Open Source VS Enterprise
Contact Sales Watch a demo
Partners
Docs

Partners
Docs
Compare Open Source VS Enterprise
Contact Sales
Downloads
KrakenD allowed us to focus on our backend and deploy a secure and performant system in a few days. After more than 2 years of use in production and 0 crash or malfunction, it also has proven its robustness
Jonathan Muller
CTO / Openroom Inc.

CVE-2026-46600 High · CVSS 7.5 False Positive

x/net/dns/dnsmessage: Panic via Malformed SVCB/HTTPS Resource Record

This CVE does not affect KrakenD

KrakenD’s outbound DNS resolution, used to resolve backend hostnames, relies on the operating system’s standard resolver requesting A and AAAA records. It never issues SVCB or HTTPS resource record queries, which are used for service binding to newer QUIC/HTTP-3 endpoints. With no SVCB/HTTPS queries made, the vulnerable parsing path in dnsmessage is never exercised by KrakenD.

Addressed through routine dependency maintenance in CE 2.13.9 and EE 2.13.7.

Component

Go extended library (x/net/dns/dnsmessage)

Disclosed

Aug 14, 2026

CVSS Score

7.5

Description

Go’s DNS message parser in golang.org/x/net/dns/dnsmessage could panic when decoding an invalid SVCB or HTTPS resource record whose parameter value size overflowed the message buffer. A malicious or compromised DNS server returning such a crafted record could crash the process performing the lookup. The fix adds bounds checking before reading the parameter value. This does not affect KrakenD, which never issues SVCB/HTTPS DNS queries.

References

View CVE-2026-46600 on NVD

Stay up to date with KrakenD releases and important updates