[Git][security-tracker-team/security-tracker][master] auto-nfu: Add CNA for Kong

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
160cafa0 by Moritz Muehlenhoff at 2026-09-21T16:53:40+02:00
auto-nfu: Add CNA for Kong

Total CVEs from Kong: 17
Total CVEs from Kong with packages assigned: 0

Scope: 	Kong products; Kong Konnect, Kong Enterprise, Kong Mesh, and
Kong Insomnia, including Kong Opensource; Kong Gateway, Kuma,
Insomnia.

- - - - -


2 changed files:

- data/CVE/list
- data/packages/nfu.yaml


Changes:

=====================================
data/CVE/list
=====================================
@@ -7741,9 +7741,9 @@ CVE-2026-15639 (An attacker can craft a malicious link that, if used by a legiti
 CVE-2026-15638 (An unauthenticated user with access to Secret Server could leverage a  ...)
 	NOT-FOR-US: Delinea
 CVE-2026-14917 (A SAML authentication bypass vulnerability affects the Kong SAML plugi ...)
-	TODO: check
+	NOT-FOR-US: Kong
 CVE-2026-14916 (A JWT signature verification vulnerability affects Kong components tha ...)
-	TODO: check
+	NOT-FOR-US: Kong
 CVE-2026-14349 (The TrueBooker \u2013 Appointment Booking and Scheduler System plugin  ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-13407 (The Royal Elementor Addons WordPress plugin before 1.7.1067 does not p ...)


=====================================
data/packages/nfu.yaml
=====================================
@@ -175,6 +175,8 @@
   cna: Joomla
 - reason: Juniper
   cna: juniper
+- reason: Kong
+  cna: Kong
 - reason: Lenovo
   cna: lenovo
 - reason: Lexmark



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/160cafa0123f5b1876eced2fceeeb4b973d5e158

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/160cafa0123f5b1876eced2fceeeb4b973d5e158
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260921/1a5feba2/attachment-0001.htm>