enteprise_gateway vulnerabilities

CVEs whose affected-version data names the enteprise_gateway package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-14916High· 7.7

1w ago

A JWT signature verification vulnerability affects Kong components that perform JWT validation for MCP OAuth2 or DataKit integrations inside Kong API Gateway Enterprise

A JWT signature verification vulnerability affects Kong components that perform JWT validation for MCP OAuth2 or DataKit integrations inside Kong API Gateway Enterprise. The affected code does not properly validate that the JWT signing a…

▾ TwilightKong · Kong Enteprise GatewayEPSS 0.67%via NVD