github.com/kong/kubernetes-ingress-controller vulnerabilities (Go)

2 vulnerabilities.

• github.com/kong/kubernetes-ingress-controller Go Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation GHSA-m23h-6mwm-39m8 Fix available 5.6 MediumMay 19, 2026
• github.com/kong/kubernetes-ingress-controller Go Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint GHSA-3278-c88v-xrh4 Fix available 4.9 MediumMay 19, 2026