Konghq Kong Gateway
By the Year
In 2024 there have been 0 vulnerabilities in Konghq Kong Gateway . Last year Kong Gateway had 1 security vulnerability published. Right now, Kong Gateway is on track to have less security vulnerabilities in 2024 than it did last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2024 | 0 | 0.00 |
| 2023 | 1 | 7.50 |
| 2022 | 0 | 0.00 |
| 2021 | 1 | 7.50 |
| 2020 | 0 | 0.00 |
| 2019 | 0 | 0.00 |
| 2018 | 0 | 0.00 |
It may take a day or so for new Kong Gateway vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Konghq Kong Gateway Security Vulnerabilities
The HTTP/2 protocol
CVE-2023-44487
7.5 - High
- October 10, 2023
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Resource Exhaustion
An improper access control vulnerability in the JWT plugin in Kong Gateway prior to 2.3.2.0
CVE-2021-27306
7.5 - High
- March 18, 2021
An improper access control vulnerability in the JWT plugin in Kong Gateway prior to 2.3.2.0 allows unauthenticated users access to authenticated routes without a valid token JWT.
Use of Incorrectly-Resolved Name or Reference
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Konghq Kong Gateway or by Konghq? Click the Watch button to subscribe.
