Cpe:2.3:a:uber:kraken:*:*:*:*:*:*:*:*

Uber Kraken versions 0.1.29 and earlier contain a path traversal vulnerability in the /tags/{tag} endpoint, allowing unauthenticated attackers to read arbitrary files from the filesystem.