A vulnerability in the proxy-cache and proxy-cache-advanced plugins of Kong Gateway Enterprise and Kong AI Gateway causes the request hostname to be omitted from the cache key. This omission may result in a cached response for one hostname being served to requests for a different hostname.