Question 1

What is CVE-2026-96437 — CVE-2026-96437?

Accepted Answer

The ai-azure-content-safety plugin in Kong Gateway Enterprise skips inspection of request bodies larger than the in-memory body buffer, allowing prompts to bypass input content-safety checks.

Question 2

What is the authoritative source for CVE-2026-96437?

Accepted Answer

CVE-2026-96437 (CVE-2026-96437) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-96437CVE-2026-96437

Description

Scoring