Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

go

github.com/kong/kubernetes-ingress-controller/v2

go

View on github.com · View on proxy.golang.org

Security Advisories for github.com/kong/kubernetes-ingress-controller/v2 in go

Moderate
3 months ago

Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation GSA_kwCzR0hTQS1tMjNoLTZtd20tMzltOM4ABXHb

go github.com/kong/kubernetes-ingress-controller, github.com/kong/kubernetes-ingress-controller/v2, github.com/kong/kubernetes-ingress-controller/v3
Moderate
3 months ago

Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint GSA_kwCzR0hTQS0zMjc4LWM4OHYteHJoNM4ABXHa

go github.com/kong/kubernetes-ingress-controller, github.com/kong/kubernetes-ingress-controller/v2

Filter by Severity

Moderate 2