Release date 2026/02/01
Bugfix
-
Fixed an issue where we didn’t clear header for absent claim.
Related Documentation
Made by
Kong Inc.
Supported Gateway Topologies
hybrid
db-less
traditional
Supported Konnect Deployments
hybrid
cloud-gateways
serverless
Compatible Protocols
grpc
grpcs
http
https
Minimum Version
Kong Gateway - 3.12
Related Resources
3.13.0.0
Release date 2025/12/18
Bugfix
-
Fixed an issue where MCP-like request was not authenticated.
-
Fixed an issue where the oidc schema was polluted during merging.
-
Fixed an issue where resource without path was not correctly handled.
-
Fixed an issue where there was an unexpected
required: falsein the plugin schema. -
Fixed an issue where x-forwarded-* headers were not respected.
3.12.0.2
Release date 2025/12/10
Bugfix
-
Fixed an issue where MCP-like request was not authenticated. Previously, we only authenticated requests that satisfied the MCP spec. As a result, the attacker can bypass this via an MCP-like request. Therefore, now we change to authenticate all the requests.
-
Fixed an issue where the oidc schema was polluted during merging.
-
Fixed an issue where resource without path was not correctly handled.
-
Fixed an issue where x-forwarded-* headers were not respected.