# KubeVela v1.11.1

> CI/CD & App Delivery · 2026-11-06

A maintenance release focused on correctness fixes, including an SSRF security fix and repairs to certificate generation and policy propagation. The recorded fixes ship in `vela-core`.

## Action needed
- **[security]** SSRF protection for workflow HTTP in `vela-core` (`GHSA-8p2m-f3vg-8jwg`)
  - `vela-core` now guards workflow HTTP requests against SSRF. This fix addresses `GHSA-8p2m-f3vg-8jwg`.

## Other recorded changes
- 2 (defect_corrected 2)

[Full analysis](https://ratatosk.io/en/releases/kubevela/v1.11.1)

[Original release notes](https://github.com/kubevela/kubevela/releases/tag/v1.11.1)