| CVE-2026-116472 |
ingress-nginx mirror-target self-DOS
|
2.7
Low
|
Nov 5, 2026 |
| CVE-2026-4342 |
A security issue was discovered in ingress-nginx where a combination of Ingress annotations can be used to inject…
|
8.8
High
|
Mar 19, 2026 |
| CVE-2026-3288 |
A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/rewrite-target` Ingress…
|
8.8
High
|
Mar 9, 2026 |
| CVE-2025-15566 |
A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-proxy-set-headers`…
|
8.8
High
|
Feb 6, 2026 |
| CVE-2026-24514 |
A security issue was discovered in ingress-nginx where the validating admission controller feature is subject to a…
|
6.5
Medium
|
Feb 3, 2026 |
| CVE-2026-24513 |
A security issue was discovered in ingress-nginx where the protection afforded by the `auth-url` Ingress annotation…
|
3.1
Low
|
Feb 3, 2026 |
| CVE-2026-24512 |
A security issue was discovered in ingress-nginx where the `rules.http.paths.path` Ingress field can be used to inject…
|
8.8
High
|
Feb 3, 2026 |
| CVE-2026-1580 |
A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-method` Ingress…
|
8.8
High
|
Feb 3, 2026 |
| CVE-2025-24514 |
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-url`…
|
8.8
High
|
Mar 24, 2025 |
| CVE-2025-24513 |
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where attacker-provided…
|
4.8
Medium
|
Mar 24, 2025 |
| CVE-2025-1098 |
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `mirror-target`…
|
8.8
High
|
Mar 24, 2025 |
| CVE-2025-1097 |
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the…
|
8.8
High
|
Mar 24, 2025 |
| CVE-2025-1974 |
A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to…
|
9.8
Critical
|
Mar 24, 2025 |
| CVE-2024-7646 |
A security issue was discovered in ingress-nginx where an actor with permission to create Ingress objects (in the…
|
8.8
High
|
Aug 16, 2024 |
| CVE-2023-5044 |
Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation
|
7.6
High
|
Oct 25, 2023 |
| CVE-2023-5043 |
Ingress nginx annotation injection causes arbitrary command execution
|
7.6
High
|
Oct 25, 2023 |
| CVE-2022-4886 |
Ingress-nginx `path` sanitization can be bypassed with `log_format` directive
|
8.8
High
|
Oct 25, 2023 |
| CVE-2020-8553 |
The Kubernetes ingress-nginx component prior to version 0.28.0 allows a user with the ability to create namespaces and…
|
5.9
Medium
|
Jul 29, 2020 |