Kong Enteprise Gateway vulnerabilities
1 known vulnerability in Kong Enteprise Gateway from Kong. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.7average CVSS score
Latest first
- 7.7 High severity
Kong Enteprise Gateway: Improper Handling of Unexpected Data Type
A JWT signature verification vulnerability affects Kong components that perform JWT validation for MCP OAuth2 or DataKit integrations inside Kong API Gateway Enterprise. The affected code does not properly validate that the JWT signing algorithm is compatible