standard

Known Exploited Vulnerabilities Catalog

CISA's authoritative list of software flaws confirmed to be exploited in the wild, which triggers mandatory patching timelines for US federal civilian agencies.

Current clusters

build1 publisher

Any Kestra API path ending in /configs skipped Basic Authentication

The bypass is a suffix match inside Kestra's AuthenticationFilter, and the vendor fix pins the check to /api/v1/configs exactly. The two ZoomEye queries that count exposed instances disagree by nearly a factor of two.

Publishers:dev.to

Reality

Evidence55
Adoption28
Hype gap−12
Incentives35
Confidence52