CVE-2026-96437
2026-11-10
22h21 +00:00
22h21 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
The ai-azure-content-safety plugin in Kong Gateway Enterprise skips inspection of request bodies larger than the in-memory body buffer, allowing prompts to bypass input content-safety checks.
CVE 資訊
相關弱點
| 弱點名稱 | 來源 | |
|---|---|---|
| Not Failing Securely When the product encounters an error condition or failure, its design requires it to fall back to a state that is less secure than other options that are available, such as selecting the weakest encryption algorithm or using the most permissive access control restrictions. |
