kestra-io Latest High & Critical Vulnerabilities

Latest High & Critical vulnerabilities published by kestra-io

JSON RSS CSV 🔔 Create Alert Trigger

18 August 2026

Stored Cross-Site Scripting in Kestra's Markdown Parser
CVE-2026-55839
Kestra-ioKestra8.7HIGH

11 August 2026

Open-Source Event-Driven Orchestration Platform Vulnerability in Kestra
CVE-2026-73247
Kestra-ioKestra8.6HIGH
Exposed Task Object in Kestra Orchestration Platform by Kestra
CVE-2026-73246
Kestra-ioKestra7.5HIGH

26 June 2026

Unauthenticated Remote Code Execution in Kestra Orchestration Platform
CVE-2026-49869
Kestra-ioKestra👾🟡🦅10CRITICAL
Path Traversal Vulnerability in Kestra Open-Source Orchestration Platform
CVE-2026-45807
Kestra-ioKestra7.7HIGH
Path Traversal Vulnerability in Kestra by Kestra.io
CVE-2026-49984
Kestra-ioKestra7.7HIGH
Authentication Bypass in Kestra Orchestration Platform by Kestra
CVE-2026-53576
Kestra-ioKestra👾🟡10CRITICAL
Authentication Vulnerability in Kestra Open-source Orchestration Platform
CVE-2026-55069
Kestra-ioKestra8.7HIGH

5 May 2026

SQL Injection Vulnerability in Kestra by Kestra-io
CVE-2026-38428
Kestra-ioKestra9.8CRITICAL

3 April 2026

SQL Injection Vulnerability in Kestra Event-Driven Orchestration Platform
CVE-2026-34612
Kestra-ioKestra10CRITICAL

26 March 2026

User Input Vulnerability in Kestra Event-Driven Orchestration Platform
CVE-2026-33664
Kestra-ioKestra7.3HIGH

6 March 2026

Remote Code Execution Vulnerability in Kestra Event-Driven Orchestration Platform
CVE-2026-29082
Kestra-ioKestra7.3HIGH