Go/github.com/kong/kubernetes-ingress-controller/v2: unknown

Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation in github.com/kong/ku

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-5485#Go/github.com/kong/kubernetes-ingress-controller/v2
• https://github.com/Kong/kubernetes-ingress-controller/security/advisories/GHSA-m23h-6mwm-39m8
• https://github.com/Kong/kubernetes-ingress-controller/pull/7920
• https://github.com/Kong/kubernetes-ingress-controller/pull/7921
• https://github.com/Kong/kubernetes-ingress-controller/pull/7922

published 2026-06-25T22:34:31Z · modified 2026-06-25T23:01:02.141888639Z · JSON