Vulnerabilidades de Konghq
CVEs publicadas que afetam produtos de Konghq: 2 registro(s), com severidade, exploração e correções.
CVE-2026-13341
Alta · 7.4
CWE-20 03/07/2026
Prompt Injection and Credential Exposure via Untrusted Analytics Data in Kong Konnect MCP
A vulnerability exists in the Kong Konnect Model Context Protocol (MCP) server prior to version 1.0.0, which could allow a remote attacker to perform an indirect prompt injection attack and execute unintended API requests.
CVE-2023-44487
Alta · 7.5
KEV Urgente · 73 Exploit público CWE-400 10/10/2023
HTTP/2 Rapid Reset Attack Vulnerability
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.