KubeVela
v1.11.1CI/CD & App DeliveryNov 6, 2026
A maintenance release focused on correctness fixes, including an SSRF security fix and repairs to certificate generation and policy propagation. The recorded fixes ship in `vela-core`.
Action needed (1)
securitySSRF protection for workflow HTTP in
vela-core(GHSA-8p2m-f3vg-8jwg)vela-corenow guards workflow HTTP requests against SSRF. This fix addresses GHSA-8p2m-f3vg-8jwg.
All 2 other recorded changesfixes 2
fixes (2)
- * 8ccbe1726 [Backport release-1.11] Fix: generate cluster-gateway and webhook certs in vela-core (#7478)
- * 6552be81d [Backport release-1.11] Fix: propagate global and Application-scoped policy changes (with #7441, #7506) (#7531)
Add KubeVela to your stack
A weekly email arrives when a release needs action. Like the security patches in this release.