Known Vulnerabilities for products from Konghq

Listed below are 2 of the newest known vulnerabilities associated with the vendor "Konghq".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2021-27306 An improper access control vulnerability in the JWT plugin in Kong Gateway prior to 2.3.2.0 allows unauthenticated users acce... 7.5 - HIGH 2021-03-18 2023-11-07
CVE-2020-11710 ** DISPUTED ** An issue was discovered in docker-kong (for Kong) through 2.0.3. The admin API port may be accessible on inter... 9.8 - CRITICAL 2020-04-12 2023-11-07

Known software with vulnerabilities from Konghq

Type Vendor Product Version
ApplicationKonghqDocker-kong-
ApplicationKonghqKong Gateway-