kong/kubernetes-ingress-controller Security Advisories | GitStock

medium2026-05-19

Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation

GHSA-m23h-6mwm-39m8

medium2026-05-19

Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint

GHSA-3278-c88v-xrh4