io.kestra:kestra-core vulnerabilities

CVEs whose affected-version data names the io.kestra:kestra-core package (maven). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-73247High· 8.6

1mo ago

Kestra is an open-source, event-driven orchestration platform

Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0, Kestra's core/src/main/java/io/kestra/core/runners/pebble/functions/HttpFunction.java passes the user-controlled http() uri argument to URI.create() and the s…

▾ Twilightkestra · io.kestra:coreEPSS 0.41%via NVD