Threats tagged 'ghsa-r3xg-jh5p-8p5v'

Kong Gateway Enterprise and Kong AI Gateway have a vulnerability where decoded CR/LF characters from the request path are included in the X-Forwarded-Prefix header on regex Routes. This allows HTTP header injection and request smuggling attacks against upstream services.