tocsin

Go/github.com/kong/kubernetes-ingress-controller/v3: unknown

Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation in github.com/kong/ku

Action: Upgrade github.com/kong/kubernetes-ingress-controller/v3 to 3.4.14 or later.

go get github.com/kong/kubernetes-ingress-controller/v3@v3.4.14
go get github.com/kong/kubernetes-ingress-controller/v3@v3.5.7

Affected

introducedfixedlast affected
03.4.14-
3.5.03.5.7-

Fixed versions

3.4.143.5.7

Sources

published · modified · JSON