Kong Gateway (Konghq) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 62 known versions, newest CVE from 2023-10-10. Vendor: Konghq.

CVEs of Kong Gateway

• CVE-2023-44487 - CVSS 7.5 (high), 2023-10-10: The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the…
• CVE-2021-27306 - CVSS 7.5 (high), 2021-03-18: An improper access control vulnerability in the JWT plugin in Kong Gateway prior to 2.3.2.0 allows unauthenticated users access to authenticated routes…