| CVE-2026-116472 |
ingress-nginx mirror-target self-DOS
|
2.7
Faible
|
5 nov. 2026 |
| CVE-2026-4342 |
A security issue was discovered in ingress-nginx where a combination of Ingress annotations can be used to inject…
|
8.8
Élevée
|
19 mars 2026 |
| CVE-2026-3288 |
A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/rewrite-target` Ingress…
|
8.8
Élevée
|
9 mars 2026 |
| CVE-2025-15566 |
A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-proxy-set-headers`…
|
8.8
Élevée
|
6 févr. 2026 |
| CVE-2026-24514 |
A security issue was discovered in ingress-nginx where the validating admission controller feature is subject to a…
|
6.5
Moyenne
|
3 févr. 2026 |
| CVE-2026-24513 |
A security issue was discovered in ingress-nginx where the protection afforded by the `auth-url` Ingress annotation…
|
3.1
Faible
|
3 févr. 2026 |
| CVE-2026-24512 |
A security issue was discovered in ingress-nginx where the `rules.http.paths.path` Ingress field can be used to inject…
|
8.8
Élevée
|
3 févr. 2026 |
| CVE-2026-1580 |
A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-method` Ingress…
|
8.8
Élevée
|
3 févr. 2026 |
| CVE-2025-24514 |
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-url`…
|
8.8
Élevée
|
24 mars 2025 |
| CVE-2025-24513 |
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where attacker-provided…
|
4.8
Moyenne
|
24 mars 2025 |
| CVE-2025-1098 |
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `mirror-target`…
|
8.8
Élevée
|
24 mars 2025 |
| CVE-2025-1097 |
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the…
|
8.8
Élevée
|
24 mars 2025 |
| CVE-2025-1974 |
A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to…
|
9.8
Critique
|
24 mars 2025 |
| CVE-2024-7646 |
A security issue was discovered in ingress-nginx where an actor with permission to create Ingress objects (in the…
|
8.8
Élevée
|
16 août 2024 |
| CVE-2023-5044 |
Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation
|
7.6
Élevée
|
25 oct. 2023 |
| CVE-2023-5043 |
Ingress nginx annotation injection causes arbitrary command execution
|
7.6
Élevée
|
25 oct. 2023 |
| CVE-2022-4886 |
Ingress-nginx `path` sanitization can be bypassed with `log_format` directive
|
8.8
Élevée
|
25 oct. 2023 |
| CVE-2020-8553 |
The Kubernetes ingress-nginx component prior to version 0.28.0 allows a user with the ability to create namespaces and…
|
5.9
Moyenne
|
29 juil. 2020 |