Go/github.com/kong/kubernetes-ingress-controller: medium

Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-m23h-6mwm-39m8#Go/github.com/kong/kubernetes-ingress-controller
• https://github.com/Kong/kubernetes-ingress-controller/security/advisories/GHSA-m23h-6mwm-39m8
• https://github.com/Kong/kubernetes-ingress-controller/pull/7920
• https://github.com/Kong/kubernetes-ingress-controller/pull/7921
• https://github.com/Kong/kubernetes-ingress-controller/pull/7922
• https://github.com/Kong/kubernetes-ingress-controller

published 2026-05-19T19:30:23Z · modified 2026-06-25T23:11:49.447881524Z · JSON