447 matches found
Ingress-Nginx Controller - Configuration Injection via Unsanitized `auth-url` Annotation
A security issue was discovered in ingress-nginx https-//github.com/kubernetes/ingress-nginx where the auth-url Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets...
CVE-2026-67309 Traefik v3.7.0 Path Traversal via RewriteTarget Authentication Bypass
Traefik versions = v3.7.0 and = v3.7.7 contain a path traversal vulnerability in the Kubernetes Ingress NGINX provider's RewriteTarget middleware generated from the nginx.ingress.kubernetes.io/rewrite-target annotation. When an Ingress path uses a regex that captures attacker-controlled text...
Ingress-Nginx Controller - Configuration Injection via Unsanitized `auth-tls-match-cn` Annotation
A security issue was discovered in ingress-nginx https-//github.com/kubernetes/ingress-nginx where the auth-tls-match-cn Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of...
CLEANSTART-2026-KL00437 Security fixes in ingress-nginx-controller-1.12 1.12.8-r0
Package ingress-nginx-controller-1.12 version 1.12.8-r0 fixes 4 vulnerabilities: CVE-2026-46600, CVE-2026-56852, CVE-2024-55549, CVE-2025-24855...
CLEANSTART-2026-CW84723 Security fixes in ingress-nginx-controller-1.14 1.14.5-r3
Package ingress-nginx-controller-1.14 version 1.14.5-r3 fixes 4 vulnerabilities: CVE-2026-46600, CVE-2026-56852, CVE-2024-55549, CVE-2025-24855...
CLEANSTART-2026-QV63914 Security fixes in ingress-nginx-controller 1.24.2-r0
Package ingress-nginx-controller version 1.24.2-r0 fixes 9 vulnerabilities: CVE-2025-22871, CVE-2025-4673, CVE-2024-45341, CVE-2024-45336, CVE-2025-0913...
CLEANSTART-2026-TQ49781 Security fixes in ingress-nginx-controller-1.15 1.15.1-r2
Package ingress-nginx-controller-1.15 version 1.15.1-r2 fixes 3 vulnerabilities: CVE-2026-42504, CVE-2026-27145, CVE-2026-42507...
CLEANSTART-2026-AW13748 Security fixes in ingress-nginx-controller-1.15 1.15.1-r3
Package ingress-nginx-controller-1.15 version 1.15.1-r3 fixes 4 vulnerabilities: CVE-2026-46600, CVE-2026-56852, CVE-2026-39822, CVE-2026-42505...
Ingress-Nginx Controller - Configuration Injection via Unsanitized Mirror Annotations
A security issue was discovered in ingress-nginx https-//github.com/kubernetes/ingress-nginx where the mirror-target and mirror-host Ingress annotations can be used to inject arbitrary configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx...
CLEANSTART-2026-LN45890 Security fixes for CVE-2024-55549, CVE-2025-24855, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27145, CVE-2026-39821, CVE-2026-39824, CVE-2026-41080, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, CVE-2026-45186, CVE-2026-46600, CVE-2026-56852 applied in versions: 1.14.5-r1, 1.14.5-r2, 1.14.5-r3
Multiple security vulnerabilities affect the ingress-nginx-controller-1.14 package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-OM32721 Security fixes for CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27145, CVE-2026-39821, CVE-2026-39824, CVE-2026-41080, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, CVE-2026-45186, CVE-2026-46600, CVE-2026-56852 applied in versions: 1.13.9-r0, 1.14.5-r1, 1.14.5-r2
Multiple security vulnerabilities affect the ingress-nginx-controller-1.13 package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-HJ99696 Security fixes for CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27145, CVE-2026-39821, CVE-2026-39824, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507 applied in versions: 1.14.5-r1
Multiple security vulnerabilities affect the ingress-nginx-controller-1.14 package. These issues are resolved in later releases. See references for individual vulnerability details...
GHSA-XCGV-8MV7-V8C7 vulnerabilities
Vulnerabilities for packages: k3s, cluster-autoscaler, kubernetes-fips, etcd-fips, ingress-nginx-controller-fips, kube-state-metrics, karpenter-fips, pulumi-language-yaml, harbor-fips, prometheus, apm-server-fips, cluster-autoscaler-fips, eks-distro, fleet-server-fips, azurefile-csi-fips,...
GHSA-4G2F-XCPH-2335 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller...
CVE-2026-1580 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller...
CVE-2026-24514 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller...
GHSA-JX8C-56MG-H6VP vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller...
GHSA-9H3P-52VH-959W vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller...