Go/github.com/kong/kubernetes-ingress-controller: medium
Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.3.4 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-3278-c88v-xrh4#Go/github.com/kong/kubernetes-ingress-controller
- https://github.com/Kong/kubernetes-ingress-controller/security/advisories/GHSA-3278-c88v-xrh4
- https://github.com/Kong/kubernetes-ingress-controller
published · modified · JSON