GHSA-4G2F-XCPH-2335 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller-fips, ingress-nginx-controller...

CVE-2026-24514 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller-fips, ingress-nginx-controller...

CVE-2026-24513 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller-fips, ingress-nginx-controller...

CVE-2026-1580 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller-fips, ingress-nginx-controller...

CVE-2026-48142 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller-fips, ingress-nginx-controller, nginx-stable...

GHSA-78JW-WW3G-9WP7 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller-fips, ingress-nginx-controller, nginx-stable...

GHSA-2388-JP8V-FG9W vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller-fips, ingress-nginx-controller, nginx-stable...

CVE-2026-42055 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller-fips, ingress-nginx-controller, nginx-stable...

CVE-2026-42055 vulnerabilities

Vulnerabilities for packages: nginx-stable, ingress-nginx-controller...

CVE-2026-48142 vulnerabilities

Vulnerabilities for packages: nginx-stable, ingress-nginx-controller...

GHSA-2388-JP8V-FG9W vulnerabilities

Vulnerabilities for packages: nginx-stable, ingress-nginx-controller...

GHSA-78JW-WW3G-9WP7 vulnerabilities

Vulnerabilities for packages: nginx-stable, ingress-nginx-controller...

CLEANSTART-2026-UK19445 Security fixes for CVE-2025-23419, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42502, CVE-2026-42506 applied in versions: 1.15.1-r0, 1.15.1-r1

Multiple security vulnerabilities affect the ingress-nginx-controller-1.15 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GM77447 Security fixes for CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27145, CVE-2026-39821, CVE-2026-39824, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507 applied in versions: 1.14.5-r1

Multiple security vulnerabilities affect the ingress-nginx-controller-1.14 package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-GCGV-V5GF-C543 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

CVE-2026-42945 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

GHSA-GCGV-V5GF-C543 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller-fips, ingress-nginx-controller...

CLEANSTART-2026-OB67529 Security fixes for CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499 applied in versions: 1.15.1-r0

Multiple security vulnerabilities affect the ingress-nginx-controller-1.15 package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: spire-server, grafana-operator, github-mcp-server, aws-privateca-issuer, fluxcd-kustomize-mutating-webhook, actions-runner-controller, karpenter, aws-load-balancer-controller, rabbitmq-messaging-topology-operator, osv-scanner, newrelic-infra-operator, supercronic,...

Ingress-NGINX Controller < 1.13.9 / 1.14.x < 1.14.5 / 1.15.x < 1.15.1 Configuration Injection

The version of Ingress-NGINX controller installed on the remote host is prior to 1.13.9, 1.14.5, or 1.15.1. It is, therefore, affected by a configuration injection vulnerability. A security issue was discovered in ingress-nginx where a combination of Ingress annotations can be used to inject...