github.com/kong/kubernetes-ingress-controller/v3
:gorilla: Kong for Kubernetes: The official Ingress Controller for Kubernetes.
View on Github
Activity
- Latest release
- 1mo ago
- Total releases
- 52
- Cadence
- ~15 days
- Last 12 months
- 22
Reach
- Stars
- 2.4k
Details
- First release
- Nov 02, 2023
| Version | Released | |
|---|---|---|
v3.5.13
patch
|
v3.5.13
patch
Dependencies (63)
+ 55 more |
|
v3.4.20
patch
1 CVE
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.4.20
patch
Dependencies (62)
+ 54 more |
|
v3.4.19
patch
1 CVE
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.4.19
patch
Dependencies (62)
+ 54 more |
|
v3.5.12
patch
|
v3.5.12
patch
Dependencies (63)
+ 55 more |
|
v3.5.11
patch
|
v3.5.11
patch
Dependencies (62)
+ 54 more |
|
v3.4.18
patch
1 CVE
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.4.18
patch
Dependencies (61)
+ 53 more |
|
v3.4.17
patch
1 CVE
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.4.17
patch
Dependencies (61)
+ 53 more |
|
v3.5.10
patch
|
v3.5.10
patch
Dependencies (62)
+ 54 more |
|
v3.5.9
patch
|
v3.5.9
patch
Dependencies (62)
+ 54 more |
|
v3.4.16
patch
1 CVE
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.4.16
patch
Dependencies (61)
+ 53 more |
|
v3.5.8
patch
|
v3.5.8
patch
Dependencies (62)
+ 54 more |
|
v3.4.15
patch
1 CVE
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.4.15
patch
Dependencies (61)
+ 53 more |
|
v3.5.7
patch
|
v3.5.7
patch
Dependencies (62)
+ 54 more |
|
v3.4.14
patch
1 CVE
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.4.14
patch
Dependencies (61)
+ 53 more |
|
v3.5.6
patch
2 CVEs
GO-2026-5485
GHSA-m23h-6mwm-39m8
Jun 25, 2026
Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing Fixed in
3.4.14
3.5.7
References Updated Jun 25, 2026 · Source: OSV.dev
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.5.6
patch
Dependencies (62)
+ 54 more |
|
v3.4.13
patch
2 CVEs
GO-2026-5485
GHSA-m23h-6mwm-39m8
Jun 25, 2026
Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing Fixed in
3.4.14
3.5.7
References Updated Jun 25, 2026 · Source: OSV.dev
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.4.13
patch
Dependencies (61)
+ 53 more |
|
v3.4.12
patch
2 CVEs
GO-2026-5485
GHSA-m23h-6mwm-39m8
Jun 25, 2026
Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing Fixed in
3.4.14
3.5.7
References Updated Jun 25, 2026 · Source: OSV.dev
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.4.12
patch
Dependencies (61)
+ 53 more |
|
v3.5.5
patch
2 CVEs
GO-2026-5485
GHSA-m23h-6mwm-39m8
Jun 25, 2026
Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing Fixed in
3.4.14
3.5.7
References Updated Jun 25, 2026 · Source: OSV.dev
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.5.5
patch
Dependencies (62)
+ 54 more |
|
v3.5.4
patch
2 CVEs
GO-2026-5485
GHSA-m23h-6mwm-39m8
Jun 25, 2026
Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing Fixed in
3.4.14
3.5.7
References Updated Jun 25, 2026 · Source: OSV.dev
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.5.4
patch
Dependencies (62)
+ 54 more |
|
v3.4.11
patch
2 CVEs
GO-2026-5485
GHSA-m23h-6mwm-39m8
Jun 25, 2026
Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing Fixed in
3.4.14
3.5.7
References Updated Jun 25, 2026 · Source: OSV.dev
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.4.11
patch
Dependencies (61)
+ 53 more |
|
v3.4.10
patch
2 CVEs
GO-2026-5485
GHSA-m23h-6mwm-39m8
Jun 25, 2026
Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing Fixed in
3.4.14
3.5.7
References Updated Jun 25, 2026 · Source: OSV.dev
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.4.10
patch
Dependencies (61)
+ 53 more |
|
v3.5.3
patch
2 CVEs
GO-2026-5485
GHSA-m23h-6mwm-39m8
Jun 25, 2026
Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing Fixed in
3.4.14
3.5.7
References Updated Jun 25, 2026 · Source: OSV.dev
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.5.3
patch
Dependencies (62)
+ 54 more |
|
v3.4.9
patch
2 CVEs
GO-2026-5485
GHSA-m23h-6mwm-39m8
Jun 25, 2026
Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing Fixed in
3.4.14
3.5.7
References Updated Jun 25, 2026 · Source: OSV.dev
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.4.9
patch
Dependencies (61)
+ 53 more |
|
v3.5.2
patch
2 CVEs
GO-2026-5485
GHSA-m23h-6mwm-39m8
Jun 25, 2026
Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing Fixed in
3.4.14
3.5.7
References Updated Jun 25, 2026 · Source: OSV.dev
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.5.2
patch
Dependencies (62)
+ 54 more |
|
v3.5.1
patch
2 CVEs
GO-2026-5485
GHSA-m23h-6mwm-39m8
Jun 25, 2026
Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing Fixed in
3.4.14
3.5.7
References Updated Jun 25, 2026 · Source: OSV.dev
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.5.1
patch
Dependencies (62)
+ 54 more |
|
v3.4.8
patch
2 CVEs
GO-2026-5485
GHSA-m23h-6mwm-39m8
Jun 25, 2026
Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing Fixed in
3.4.14
3.5.7
References Updated Jun 25, 2026 · Source: OSV.dev
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.4.8
patch
Dependencies (61)
+ 53 more |
|
v3.5.0
minor
2 CVEs
GO-2026-5485
GHSA-m23h-6mwm-39m8
Jun 25, 2026
Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing Fixed in
3.4.14
3.5.7
References Updated Jun 25, 2026 · Source: OSV.dev
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.5.0
minor
Dependencies (62)
+ 54 more |
|
v3.4.7
patch
2 CVEs
GO-2026-5485
GHSA-m23h-6mwm-39m8
Jun 25, 2026
Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing Fixed in
3.4.14
3.5.7
References Updated Jun 25, 2026 · Source: OSV.dev
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.4.7
patch
Dependencies (61)
+ 53 more |
|
v3.4.6
patch
2 CVEs
GO-2026-5485
GHSA-m23h-6mwm-39m8
Jun 25, 2026
Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing Fixed in
3.4.14
3.5.7
References Updated Jun 25, 2026 · Source: OSV.dev
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.4.6
patch
Dependencies (61)
+ 53 more |
|
v3.4.5
patch
2 CVEs
GO-2026-5485
GHSA-m23h-6mwm-39m8
Jun 25, 2026
Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing Fixed in
3.4.14
3.5.7
References Updated Jun 25, 2026 · Source: OSV.dev
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.4.5
patch
Dependencies (61)
+ 53 more |
|
v3.4.4
patch
2 CVEs
GO-2026-5485
GHSA-m23h-6mwm-39m8
Jun 25, 2026
Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing Fixed in
3.4.14
3.5.7
References Updated Jun 25, 2026 · Source: OSV.dev
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.4.4
patch
Dependencies (61)
+ 53 more |
|
v3.4.3
patch
2 CVEs
GO-2026-5485
GHSA-m23h-6mwm-39m8
Jun 25, 2026
Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing Fixed in
3.4.14
3.5.7
References Updated Jun 25, 2026 · Source: OSV.dev
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.4.3
patch
Dependencies (59)
+ 51 more |
|
v3.4.2
patch
2 CVEs
GO-2026-5485
GHSA-m23h-6mwm-39m8
Jun 25, 2026
Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing Fixed in
3.4.14
3.5.7
References Updated Jun 25, 2026 · Source: OSV.dev
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.4.2
patch
Dependencies (59)
+ 51 more |
|
v3.4.1
patch
2 CVEs
GO-2026-5485
GHSA-m23h-6mwm-39m8
Jun 25, 2026
Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing Fixed in
3.4.14
3.5.7
References Updated Jun 25, 2026 · Source: OSV.dev
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.4.1
patch
Dependencies (59)
+ 51 more |
|
v3.4.0
minor
2 CVEs
GO-2026-5485
GHSA-m23h-6mwm-39m8
Jun 25, 2026
Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing Fixed in
3.4.14
3.5.7
References Updated Jun 25, 2026 · Source: OSV.dev
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.4.0
minor
Dependencies (58)
+ 50 more |
|
v3.3.1
minor
2 CVEs
GO-2026-5485
GHSA-m23h-6mwm-39m8
Jun 25, 2026
Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing Fixed in
3.4.14
3.5.7
References Updated Jun 25, 2026 · Source: OSV.dev
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.3.1
minor
Dependencies (56)
+ 48 more |
|
v3.2.4
patch
2 CVEs
GO-2026-5485
GHSA-m23h-6mwm-39m8
Jun 25, 2026
Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing Fixed in
3.4.14
3.5.7
References Updated Jun 25, 2026 · Source: OSV.dev
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.2.4
patch
Dependencies (53)
+ 45 more |
|
v3.2.3
patch
2 CVEs
GO-2026-5485
GHSA-m23h-6mwm-39m8
Jun 25, 2026
Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing Fixed in
3.4.14
3.5.7
References Updated Jun 25, 2026 · Source: OSV.dev
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.2.3
patch
Dependencies (53)
+ 45 more |
|
v3.2.2
patch
2 CVEs
GO-2026-5485
GHSA-m23h-6mwm-39m8
Jun 25, 2026
Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing Fixed in
3.4.14
3.5.7
References Updated Jun 25, 2026 · Source: OSV.dev
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.2.2
patch
Dependencies (53)
+ 45 more |
|
v3.2.1
patch
2 CVEs
GO-2026-5485
GHSA-m23h-6mwm-39m8
Jun 25, 2026
Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing Fixed in
3.4.14
3.5.7
References Updated Jun 25, 2026 · Source: OSV.dev
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.2.1
patch
Dependencies (53)
+ 45 more |
|
v3.2.0
minor
2 CVEs
GO-2026-5485
GHSA-m23h-6mwm-39m8
Jun 25, 2026
Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing Fixed in
3.4.14
3.5.7
References Updated Jun 25, 2026 · Source: OSV.dev
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.2.0
minor
Dependencies (53)
+ 45 more |
|
v3.1.6
patch
2 CVEs
GO-2026-5485
GHSA-m23h-6mwm-39m8
Jun 25, 2026
Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing Fixed in
3.4.14
3.5.7
References Updated Jun 25, 2026 · Source: OSV.dev
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.1.6
patch
Dependencies (53)
+ 45 more |
|
v3.1.5
patch
2 CVEs
GO-2026-5485
GHSA-m23h-6mwm-39m8
Jun 25, 2026
Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing Fixed in
3.4.14
3.5.7
References Updated Jun 25, 2026 · Source: OSV.dev
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.1.5
patch
Dependencies (53)
+ 45 more |
|
v3.1.4
patch
2 CVEs
GO-2026-5485
GHSA-m23h-6mwm-39m8
Jun 25, 2026
Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing Fixed in
3.4.14
3.5.7
References Updated Jun 25, 2026 · Source: OSV.dev
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.1.4
patch
Dependencies (53)
+ 45 more |
|
v3.1.3
patch
2 CVEs
GO-2026-5485
GHSA-m23h-6mwm-39m8
Jun 25, 2026
Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing Fixed in
3.4.14
3.5.7
References Updated Jun 25, 2026 · Source: OSV.dev
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.1.3
patch
Dependencies (53)
+ 45 more |
|
v3.1.2
patch
2 CVEs
GO-2026-5485
GHSA-m23h-6mwm-39m8
Jun 25, 2026
Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing Fixed in
3.4.14
3.5.7
References Updated Jun 25, 2026 · Source: OSV.dev
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.1.2
patch
Dependencies (53)
+ 45 more |
|
v3.1.1
patch
2 CVEs
GO-2026-5485
GHSA-m23h-6mwm-39m8
Jun 25, 2026
Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing Fixed in
3.4.14
3.5.7
References Updated Jun 25, 2026 · Source: OSV.dev
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.1.1
patch
Dependencies (53)
+ 45 more |
|
v3.1.0
minor
2 CVEs
GO-2026-5485
GHSA-m23h-6mwm-39m8
Jun 25, 2026
Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing Fixed in
3.4.14
3.5.7
References Updated Jun 25, 2026 · Source: OSV.dev
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.1.0
minor
Dependencies (53)
+ 45 more |
|
v3.0.2
patch
2 CVEs
GO-2026-5485
GHSA-m23h-6mwm-39m8
Jun 25, 2026
Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing Fixed in
3.4.14
3.5.7
References Updated Jun 25, 2026 · Source: OSV.dev
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.0.2
patch
Dependencies (49)
+ 41 more |
|
v3.0.1
patch
2 CVEs
GO-2026-5485
GHSA-m23h-6mwm-39m8
Jun 25, 2026
Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing Fixed in
3.4.14
3.5.7
References Updated Jun 25, 2026 · Source: OSV.dev
GO-2026-5010
GHSA-3278-c88v-xrh4
May 20, 2026
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller Fixed in
3.5.7
References Updated May 20, 2026 · Source: OSV.dev |
v3.0.1
patch
Dependencies (49)
+ 41 more |