I have found 2 vulnerabilities on kgateway recently, and they have been announced last Tuesday. I have decided to write a bit about it, why they are a problem (and why I disagree with its score), and some measures you should take :) Mostly it was about also a research and learn!