kong
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 14 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 21, 2013 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →SQL Injection in Clustering Communication (Hybrid Mode)
Kong API Gateway Enterprise: JWT Algorithm-Confusion
Kong Mesh multi-zone: the global control plane attributes KDS-synced resources by an unvalidated in-band zone identifier
Kong Mesh: a dataplane token without a workload binding can claim any workload's SPIFFE identity
Kong Mesh: control plane denial of service via a malformed dataplane token with a non-string JWT kid
Kong Event Gateway AES-GCM nonce reuse due to missing key rotation enforcement
Kong Operator cluster-wide ingress configuration DoS via embedded KIC CA-certificate ID collision
Kong Kubernetes Ingress Controller cluster-wide ingress configuration DoS via CA-certificate ID collision
Prompt Injection and Credential Exposure via Untrusted Analytics Data in Kong Konnect MCP
HTTP request smuggling in Kong Enteprise Gateway
Monitor kong in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.