kong
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 13 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 21, 2013 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Kong API Gateway Enterprise: JWT Algorithm-Confusion
Kong Mesh multi-zone: the global control plane attributes KDS-synced resources by an unvalidated in-band zone identifier
Kong Mesh: a dataplane token without a workload binding can claim any workload's SPIFFE identity
Kong Mesh: control plane denial of service via a malformed dataplane token with a non-string JWT kid
Kong Event Gateway AES-GCM nonce reuse due to missing key rotation enforcement
Kong Operator cluster-wide ingress configuration DoS via embedded KIC CA-certificate ID collision
Kong Kubernetes Ingress Controller cluster-wide ingress configuration DoS via CA-certificate ID collision
Prompt Injection and Credential Exposure via Untrusted Analytics Data in Kong Konnect MCP
HTTP request smuggling in Kong Enteprise Gateway
Arbitrary Code Execution in Kong Insomnia Desktop Application
Monitor kong in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.