github.com/kumahq/kuma/v2 vulnerabilities
CVEs whose affected-version data names the github.com/kumahq/kuma/v2 package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-18679Mediumkuma-dp connects to control plane without verifying TLS certificate when no CA is configured
kuma-dp connects to control plane without verifying TLS certificate when no CA is configured
▾ Sunlitkumahq · github.com/kumahq/kuma/v2EPSS 0.12%via OSV
CVE-2026-18678Mediumkumactl connects to control plane without verifying TLS certificate when no CA is configured
kumactl connects to control plane without verifying TLS certificate when no CA is configured
▾ Sunlitkumahq · github.com/kumahq/kuma/v2EPSS 0.10%via OSV