Affected by GO-2026-5944 and 3 other vulnerabilities

GO-2026-5944: Skipper: opaAuthorizeRequestWithBody filter bypasses OPA policy on Transfer-Encoding — chunked / HTTP/2 requests in github.com/zalando/skipper

GO-2026-6015: Skipper: Unbounded Request Body Read in Admission Webhook Causes Memory Exhaustion DoS in github.com/zalando/skipper

GO-2026-6018: Skipper's routesrv-no-auth component: All routesrv API Endpoints Lack Authentication in github.com/zalando/skipper

GO-2026-6019: Skipper: Incomplete fix for CVE-2026-50197: an oversized body can bypass OPA deny-on-presence Rego policies in github.com/zalando/skipper

validation

package

v0.24.32 Latest Latest Go to latest Published: Feb 27, 2026 License: Apache-2.0, MIT Imports: 13 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/zalando/skipper

Links

Open Source Insights

Documentation ¶

Overview ¶

Package validation provides Kubernetes validation webhook related code.

Index ¶

func StartValidation(opts Options, routingOptions routing.Options) error
type Options

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func StartValidation ¶

func StartValidation(opts Options, routingOptions routing.Options) error

StartValidation launches the validation webhook server and keeps serving until the returned listener encounters an unrecoverable error, or the process shuts down.

Types ¶

type Options ¶ added in v0.24.28

type Options struct {
	Address                  string
	CertFile                 string
	KeyFile                  string
	EnableAdvancedValidation bool
}

Source Files ¶

View all Source files

validation.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL