Skip to content
Konghq vulnerabilities
Newest
-
konghq mcp-konnect
Prompt Injection and Credential Exposure via Untrusted Analytics Data in Kong Konnect MCP
CVE-2026-13341
7.4 High
-
kong insomnia macos, konghq insomnia +1 more
Kong Insomnia 2023.4.0 on macOS allows attackers to execute code and access restricted files, or...
CVE-2023-40299
7.8 High
-
eclipse jetty, ietf http, http/2 +166 more +168 more
Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations
CVE-2023-44487
In KEVPublic exploitFix available
EPSS 100.0%
7.5 High
-
konghq kong
Konga Login API random values
CVE-2023-2418
3.1 Low
-
kong lua-multipart, konghq multipart +1 more
Kong lua-multipart multipart.lua is_header redos
CVE-2020-36661
3.5 Low
-
konghq kong gateway
An improper access control vulnerability in the JWT plugin in Kong Gateway prior to 2.3.0.0...
CVE-2021-27306
7.5 High
-
konghq docker-kong
An issue was discovered in docker-kong (for Kong) through 2.0.3. The admin API port may be...
CVE-2020-11710
Disputed
EPSS 33.1%
9.8 Critical