Kiboko Labs — Vulnerabilities & Security Advisories 11

Kiboko Labs develops open-source API testing tools, primarily for REST and GraphQL services. Historically, their products have been vulnerable to remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from improper input validation and insecure deserialization. The organization has addressed 11 CVEs to date, with several critical issues allowing attackers to execute arbitrary code or bypass authentication. While no major public security incidents have been documented, their vulnerability history suggests a pattern of insecure default configurations and insufficient sanitization in API handling components.