Threats tagged 'ghsa-jhvx-hcq3-vmx2'

A vulnerability in the request-callout plugin of Kong Gateway Enterprise and Kong AI Gateway causes omission of callout headers not sent by the client from the cache key. This flaw allows cached callout responses intended for one caller to be served to another, potentially leading to incorrect or unauthorized data being returned.