Security Context: the context to find the next vulnerability

kestra-io/kestra

develop@ f508ee5

Fixes20

CVEs0

Peak severityCritical

Commits11,835

Regression coverage14.3%

Highlights

Cross-Site Scripting: 6 prior fixes. Scrutinize any change in this area.

ui/packages/design-system/src/components/Data/KsMarkdown/KsMarkdown.vue: most-fixed (2 issues). Treat as high-risk during review.

18 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Cross-Site Scripting: 2 historical fix(es) link ui/packages/design-system/src/components/Data/KsMarkdown/KsMarkdown.vue to Cross-Site Scripting.

Authentication Bypass: 1 historical fix(es) link webserver/src/main/java/io/kestra/webserver/controllers/api/MiscController.java to Authentication Bypass.

Authentication Bypass: 1 historical fix(es) link webserver/src/main/java/io/kestra/webserver/filter/AuthenticationFilter.java to Authentication Bypass.

Last analyzed 30 Sep 2026, 02:52 UTC