https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T01:08:36.650492+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-1561 CVE-2022-1561 — Crafted backend URLs in Lura Project 2026-10-05T01:08:36.666725+00:00

Affected: KrakenD Lura Project, KrakenD-CE, KrakenD-EE

Lura and KrakenD-CE versions older than v2.0.2 and KrakenD-EE versions older than v2.0.0 do not sanitize URL parameters correctly, allowing a malicious user to alter the backend URL defined for a pipe when remote users send crafty URL requests. The vulnerability does not affect KrakenD itself, but the consumed backend might be vulnerable.