Konghq

Kong provides API gateway and developer-tooling platforms that sit in the critical request path of microservices architectures and modern application stacks, positioning its vulnerabilities as high-impact to organizations that depend on it for traffic routing and lifecycle management. Vulnerabilities affecting the vendor skew toward serious outcomes, with an elevated tendency toward both confirmed in-the-wild exploitation and public exploit availability, reflecting the internet-facing and authentication-critical role of the gateway product. The recurring exposure centers on the core Kong Gateway product and its containerized variants, with durable signal in weakness classes including regular expression complexity, resource-consumption issues, and process-control flaws that reflect parser and request-handling complexity in a proxy-oriented codebase. Current severity, exploitation activity, and exposure counts are shown alongside this summary.