KrakenD Circuit Breaker Component Improper Resource Shutdown Vulnerability

A vulnerability has been identified in the Circuit Breaker modules of KrakenD Community Edition (CE) versions prior to 2.13.1 and KrakenD Enterprise Edition (EE) versions prior to 2.12.5. This vulnerability involves improper resource shutdown or release, which could lead to uncontrolled context cancellations. Such a flaw can cascade through a system under load, causing unexpected request failures and degraded service availability.

Impact

Exploitation of this vulnerability could result in uncontrolled context cancellations, leading to request failures and degraded service availability, especially under load.

Remediation

Users are advised to upgrade to KrakenD CE version 2.13.1 or KrakenD EE version 2.12.5, both of which include the necessary patch for this vulnerability.