Skip to content

Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation

Moderate severity GitHub Reviewed Published May 13, 2026 in Kong/kubernetes-ingress-controller • Updated May 19, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts