Kong Inc. vulnerabilities
Every vulnerability this feed holds for Kong Inc., merged from five public registers and ordered by what warrants attention first — exploited in the wild, then CVSS, then recency.
8 vulnerabilities tracked.
- 8.7 The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway omit the request hostname from the cache…
- 8.3 The graphql-proxy-cache-advanced plugin in Kong Gateway Enterprise omits the caller's identity from the cache key, allowing a response…
- 8.2 The ai-azure-content-safety plugin in Kong Gateway Enterprise skips inspection of request bodies larger than the in-memory body buffer,…
- 8.2 The caching plugins in Kong Gateway Enterprise and Kong AI Gateway may serve a response cached for a request carrying an Authorization or…
- 8.2 The request-callout plugin in Kong Gateway Enterprise and Kong AI Gateway omits callout headers not sent by the client from its cache key,…
- 7.8 Kong Gateway Enterprise and Kong AI Gateway include decoded CR/LF characters from the request path in the X-Forwarded-Prefix header on…
- 7.8 The SAML plugin in Kong Gateway Enterprise does not enforce AudienceRestriction, allowing a valid assertion issued for another Service…
- 6.3 The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway do not escape separator characters when…
What this covers
This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that Kong Inc. is free of vulnerabilities.
Query this from an agent over MCP · Check a lockfile by version
Other vendors tracked here
Microsoft Linux Red Hat IBM Google n/a Apple Apache Software Foundation Oracle Corporation zephyrproject Unknown FFMPEG Fortinet Adobe Drupal SAP_SE Cisco Eclipse Foundation OpenEMR erlang go-vikunja hickory-dns n8n-io Hitachi