Kong vulnerabilities

Products

• Enterprise Gateway 3

Newest

• kong gateway, enterprise gateway +1 more SQL Injection in Clustering Communication (Hybrid Mode) CVE-2026-1907 7.5 HighOctober 12, 2026
• kong enteprise gateway Kong API Gateway Enterprise: JWT Algorithm-Confusion CVE-2026-14916 7.7 HighSeptember 16, 2026
• kong enterprise gateway Kong API Gateway Enterprise: SAML Authentication bypass CVE-2026-14917 7.7 HighSeptember 16, 2026
• kong event gateway Kong Event Gateway AES-GCM nonce reuse due to missing key rotation enforcement CVE-2026-17578 2.3 LowAugust 5, 2026
• kong enterprise gateway HTTP request smuggling in Kong Enteprise Gateway CVE-2026-6338 4.9 MediumJune 11, 2026
• kong insomnia Kong Insomnia profapi.dll untrusted search path CVE-2025-1353 Disputed 7.3 HighFebruary 16, 2025
• kong lua-multipart, konghq multipart +1 more Kong lua-multipart multipart.lua is_header redos CVE-2020-36661 3.5 LowFebruary 12, 2023
• kong alpine docker image The official kong docker images before 1.0.2-alpine (Alpine specific) contain a blank password... CVE-2020-35189 9.8 CriticalDecember 17, 2020
• kong inf08 Cross-site scripting (XSS) vulnerability in the phptemplate_preprocess_node function in template... CVE-2012-6572 4.3 MediumJune 21, 2013