Security
فارسی
All products

k8s.io/ingress-nginx

Go · Package
17 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
ingress-nginx's `rules.http.paths.path` Ingress field can be used to inject configuration into nginxCVE-2026-24512 · GHSA-JX8C-56MG-H6VPVersion ranges need review. k8s.io/ingress-nginx Go High Fix reported
ingress-nginx admission controller RCE escalationCVE-2025-1974 · GHSA-MGVX-RPFC-9MPVVersion ranges need review. k8s.io/ingress-nginx Go Critical Fix reported
ingress-nginx's `nginx.ingress.kubernetes.io/auth-method` Ingress annotation can be used to inject configuration into nginxCVE-2026-1580 · GHSA-9H3P-52VH-959WVersion ranges need review. k8s.io/ingress-nginx Go High Fix reported
ingress-nginx has Improper Check for Unusual or Exceptional ConditionsCVE-2026-24513 · GHSA-4G2F-XCPH-2335Version ranges need review. k8s.io/ingress-nginx Go Low Fix reported
ingress-nginx vulnerable to Allocation of Resources Without Limits or Throttling CVE-2026-24514 · GHSA-2PF9-VR92-6H3VVersion ranges need review. k8s.io/ingress-nginx Go Medium Fix reported
ingress-nginx controller - auth secret file path traversal vulnerabilityCVE-2025-24513 · GHSA-242M-6H72-7HGPVersion ranges need review. k8s.io/ingress-nginx Go Medium Fix reported
Ingress-nginx code injection via nginx.ingress.kubernetes.io/permanent-redirect annotationCVE-2023-5044 · GHSA-FP9F-44C2-CW27Version ranges need review. k8s.io/ingress-nginx Go High Fix reported
ingress-nginx controller - configuration injection via unsanitized auth-url annotationCVE-2025-24514 · GHSA-FWWP-XCXW-39VQVersion ranges need review. k8s.io/ingress-nginx Go High Fix reported
ngress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotationCVE-2025-1097 · GHSA-823X-FV5P-H7HWVersion ranges need review. k8s.io/ingress-nginx Go High Fix reported
ingress-nginx controller - configuration injection via unsanitized mirror annotationsCVE-2025-1098 · GHSA-VG63-W3P9-JC9MVersion ranges need review. k8s.io/ingress-nginx Go High Fix reported
Kubernetes ingress exposes sensitive informationCVE-2018-1002104 · GHSA-P3X5-5XPX-9PHM k8s.io/ingress-nginx Go Medium Fix reported
Ingress-nginx path sanitization can be bypassedCVE-2022-4886 · GHSA-GVRM-W2F9-F77Q k8s.io/ingress-nginx Go High Fix reported
Ingress nginx annotation injection causes arbitrary command executionCVE-2023-5043 · GHSA-5WJ4-WFFQ-3378 k8s.io/ingress-nginx Go High Fix reported
ingress-nginx component for Kubernetes allows file overwriteCVE-2020-8553 · GHSA-HHPM-74PM-HF35 k8s.io/ingress-nginx Go Medium Fix reported
Ingress-nginx `path` sanitization can be bypassed with newline characterCVE-2021-25748 · GHSA-863X-868H-968X k8s.io/ingress-nginx Go Medium Fix reported
Improper Input Validation in k8s.io/ingress-nginxCVE-2021-25745 · GHSA-PVMG-XGMX-9MXH k8s.io/ingress-nginx Go High Fix reported
ingress-nginx comment-based nginx configuration injectionCVE-2026-4342 · GHSA-F53H-MXV9-CP98Version ranges need review. k8s.io/ingress-nginx Go High Fix reported