Ingress-Nginx Controller - Configuration Injection via Unsanitized `auth-url` Annotation

A security issue was discovered in ingress-nginx https-//github.com/kubernetes/ingress-nginx where the auth-url Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets...

Ingress-Nginx Controller - Configuration Injection via Unsanitized `auth-tls-match-cn` Annotation

A security issue was discovered in ingress-nginx https-//github.com/kubernetes/ingress-nginx where the auth-tls-match-cn Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of...

Ingress-Nginx Controller - Configuration Injection via Unsanitized Mirror Annotations

A security issue was discovered in ingress-nginx https-//github.com/kubernetes/ingress-nginx where the mirror-target and mirror-host Ingress annotations can be used to inject arbitrary configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: apko, consul, rekor-fips, gatekeeper-fips, knative-operator-fips, mattermost-fips, buildkite-agent-fips, prometheus-operator, buildkitd-fips, vault-secrets-operator, buildah-fips, frankenphp-8.2, pinact, traefik-fips, docker-cli-fips, kubernetes-dashboard,...

GHSA-4G2F-XCPH-2335 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

CVE-2026-24512 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

CVE-2026-1580 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

GHSA-JX8C-56MG-H6VP vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

GHSA-9H3P-52VH-959W vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

CVE-2026-24514 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

GHSA-2PF9-VR92-6H3V vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

CVE-2026-24513 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

CVE-2026-24514 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller-fips, ingress-nginx-controller...

CVE-2026-24513 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller-fips, ingress-nginx-controller...

GHSA-2PF9-VR92-6H3V vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller-fips, ingress-nginx-controller...

GHSA-4G2F-XCPH-2335 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller-fips, ingress-nginx-controller...

CVE-2026-1580 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller-fips, ingress-nginx-controller...

GHSA-JX8C-56MG-H6VP vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller-fips, ingress-nginx-controller...

GHSA-9H3P-52VH-959W vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller-fips, ingress-nginx-controller...

GHSA-78JW-WW3G-9WP7 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller-fips, ingress-nginx-controller...