Skip to content
OpenAdvisories

Vendor

Kong

25 known vulnerabilities.

Products

Kong Gateway Enterprise 10 Kong AI Gateway 9 Kong Mesh 7 Kong Enterprise Gateway 3 Insomnia 2 Kong Event Gateway 1 Kong Enteprise Gateway 1 lua-multipart 1 Kong Gateway 1 Gateway 0
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.3
    CVE-2026-17578

    Kong Event Gateway AES-GCM nonce reuse due to missing key rotation enforcement

    Kong Event Gateway versions 1.0.0 through 1.1.1 and 1.2.0 do not enforce key rotation before reaching NIST SP 800-38D recommended usage limit for AES-GCM encryption keys with random nonces when the AWS IAM encryption feature is enabled. If a producer sends me…

    Kong Kong Event Gateway
  • Low 3.5
    CVE-2020-36661

    Kong lua-multipart multipart.lua is_header redos

    A vulnerability was found in Kong lua-multipart 0.5.8-1. It has been declared as problematic. This vulnerability affects the function is_header of the file src/multipart.lua. The manipulation leads to inefficient regular expression complexity. Upgrading to ve…

    Kong lua-multipart