CLEANSTART-2026-OJ41940 net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines

Multiple security vulnerabilities affect the ingress-nginx-controller package. The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. See references for individual vulnerability details...

CVE-2022-23008

On NGINX Controller API Management versions 3.18.0-3.19.0, an authenticated attacker with access to the "user" or "admin" role can use undisclosed API endpoints on NGINX Controller API Management to inject JavaScript code that is executed on managed NGINX data plane instances. Note: Software...

CVE-2020-7621

strong-nginx-controller through 1.0.2 is vulnerable to Command Injection. It allows execution of arbitrary command as part of the 'nginxCmd' function...

EUVD-2021-10139

Malware in sbrugna...

EUVD-2020-27019

Malware in sbrugna...

EUVD-2020-27049

Malware in sbrugna...

EUVD-2020-27064

Malware in sbrugna...

EUVD-2020-27018

Malware in sbrugna...

EUVD-2020-27063

Malware in sbrugna...

EUVD-2020-27055

Malware in sbrugna...

EUVD-2021-10137

Malware in sbrugna...

EUVD-2020-27048

Malware in sbrugna...

EUVD-2020-20234

Malware in sbrugna...

EUVD-2020-27054

Malware in sbrugna...

EUVD-2020-27020

Malware in sbrugna...

EUVD-2021-10136

Malware in sbrugna...

EUVD-2020-27021

Malware in sbrugna...

EUVD-2020-27065

Malware in sbrugna...

EUVD-2020-27017

Malware in sbrugna...

EUVD-2020-27053

Malware in sbrugna...