Threats tagged 'ghsa-jvch-w6fx-vccj'

A SQL injection vulnerability exists in the LLM usage counters of Kong Gateway Enterprise and Kong AI Gateway. This flaw allows a client to execute arbitrary SQL commands against the Kong database by submitting a specially crafted model name. The vulnerability has a high severity score of 8.7 and was published on November 10, 2026. No affected versions or patch information are provided in the available data.