MEDIUMGo
GHSA-3278-c88v-xrh4· GO-2026-5010Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint
Modified: 6/8/2026
package
Go/github.com/kong/kubernetes-ingress-controller
pkg:go/github.com/kong/kubernetes-ingress-controller
MEDIUMGo
GHSA-m23h-6mwm-39m8· GO-2026-5485Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation
Modified: 6/25/2026
—Go
GO-2026-5010· GHSA-3278-c88v-xrh4Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller
Modified: 5/20/2026
—Go
GO-2026-5485· GHSA-m23h-6mwm-39m8Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation in github.com/kong/kubernetes-ingress-controller
Modified: 6/25/2026