Threats tagged 'ghsa-qwjr-cqjj-jhfj'

The graphql-proxy-cache-advanced plugin in Kong Gateway Enterprise has a vulnerability where it omits the caller's identity from the cache key. This flaw allows a cached response intended for one caller to be served to a different caller, potentially exposing sensitive data across users.