Homebrew Formulae: krane

krane

Install command:

brew install krane

Kubernetes deploy tool with rollout verification

License: MIT

Formula code: krane.rb on GitHub

Bottle (binary package) installation support provided for:

Current versions:

stable

✅

3.9.1

Depends on:

kubernetes-cli	1.36.4	Kubernetes command-line interface
ruby	4.0.6	Powerful, clean, object-oriented scripting language

Known vulnerabilities in the current version:

GHSA-33mh-2634-fwr2 (medium)	Faraday affected by SSRF via protocol-relative URL host override in build_exclusive_url
GHSA-cg4j-q9v8-6v38	Rails Active Support has a possible ReDoS vulnerability in number_to_delimited
GHSA-89vf-4333-qx8v	Rails Active Support has a possible XSS vulnerability in SafeBuffer#%
GHSA-2j26-frm8-cmj9	Rails Active Support has a possible DoS vulnerability in its number helpers
GHSA-3m6g-2423-7cp3	Ruby JSON has a format string injection vulnerability
GHSA-5rv5-xj5j-3484	Faraday has a possible incomplete fix for GHSA-33mh-2634-fwr2: protocol-relative URI objects stil...
GHSA-h27x-rffw-24p4 (high)	Addressable has a Regular Expression Denial of Service in Addressable templates
GHSA-c32j-vqhx-rx3x (high)	ruby-jwt: Empty-key HMAC bypass; cross-language sibling of CVE-2026-44351
GHSA-98m9-hrrm-r99r (high)	Faraday: Uncontrolled recursion in NestedParamsEncoder allows stack exhaustion DoS via deeply nes...
GHSA-x2f5-4prf-w687 (low)	Ruby json: JSON generator heap buffer overflow when streaming to an IO
GHSA-h8w8-99g7-qmvj (high)	Concurrent Ruby : `AtomicReference#update` livelocks when the stored value is `Float::NAN`
GHSA-wv3x-4vxv-whpp (medium)	Concurrent Ruby: `ReentrantReadWriteLock` read-count overflow grants a write lock without exclusi...
GHSA-6wx8-w4f5-wwcr	Concurrent Ruby: ReadWriteLock allows wrong-thread write release and stray read-release counter c...

Data from Homebrew/advisory-database. Run brew vulns krane for a live check.

Analytics: