Kong Konghq Kong

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in Konghq Kong.

By the Year

In 2026 there have been 0 vulnerabilities in Konghq Kong. Kong did not have any published security vulnerabilities last year.

Year Vulnerabilities Average Score
2026 0 0.00
2025 0 0.00
2024 0 0.00
2023 1 5.90

It may take a day or so for new Kong vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Konghq Kong Security Vulnerabilities

Insufficient Randomness in Konga 2.8.3 Login API (CVE-2023-2418)
CVE-2023-2418 5.9 - Medium - April 29, 2023

A vulnerability was found in Konga 2.8.3 on Kong. It has been classified as problematic. This affects an unknown part of the component Login API. The manipulation leads to insufficiently random values. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to change the configuration settings. The associated identifier of this vulnerability is VDB-227715.

Use of Insufficiently Random Values

Stay on top of Security Vulnerabilities

Want an email whenever new vulnerabilities are published for Konghq Kong or by Konghq? Click the Watch button to subscribe.

Konghq
Vendor

Konghq Kong
Product

subscribe