https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-12T07:05:44.970468+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-92441 fkie_cve-2026-92441 2026-11-12T07:05:44.972795+00:00

Kong Gateway Enterprise and Kong AI Gateway include decoded CR/LF characters from the request path in the X-Forwarded-Prefix header on regex Routes, allowing HTTP header injection and request smuggling to the upstream.

 https://db.gcve.eu/vuln/ghsa-r3xg-jh5p-8p5v GHSA-r3xg-jh5p-8p5v 2026-11-12T07:05:44.972852+00:00

Kong Gateway Enterprise and Kong AI Gateway include decoded CR/LF characters from the request path in the X-Forwarded-Prefix header on regex Routes, allowing HTTP header injection and request smuggling to the upstream.

 https://db.gcve.eu/vuln/wid-sec-w-2026-4488 WID-SEC-W-2026-4488 — Kong Gateway: Mehrere Schwachstellen 2026-11-12T07:05:44.972873+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Kong Gateway ausnutzen, um Sicherheitsvorkehrungen zu umgehen und dadurch u.a. Informationen offenzulegen.