Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-53543
4.2
MEDIUMCVSS v3
Published
July 7, 2025
Affected
1 project
Assigned by
GitHub
Severity scale
010
Description
Kestra is an event-driven orchestration platform. The error message in execution "Overview" tab is vulnerable to stored XSS due to improper handling of HTTP response received. This vulnerability is fixed in 0.22.0.
kestra-io/kestra
GitHubEvent Driven Orchestration & Scheduling Platform for Mission Critical Applications
GitHubEvent Driven Orchestration & Scheduling Platform for Mission Critical ApplicationsNVD