AZL-93105 CVE-2026-56852 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-6

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

CVE-2026-42502 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-4

CVE-2026-42502 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-4. A patched version of the package is available...

AZL-87360 CVE-2026-39821 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-5

The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode"xn--example-.com" incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna...

AZL-87363 CVE-2026-42506 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-5

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

AZL-87375 CVE-2026-27136 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-5

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

AZL-87372 CVE-2026-42502 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-5

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

AZL-87366 CVE-2026-25680 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-5

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

AZL-86424 CVE-2026-33814 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-5

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGSMAXFRAMESIZE with a value of 0...

CVE-2025-47911 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-3

CVE-2025-47911 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-3. A patched version of the package is available...

CVE-2025-47911 affecting package application-gateway-kubernetes-ingress for versions less than 1.4.0-27

CVE-2025-47911 affecting package application-gateway-kubernetes-ingress for versions less than 1.4.0-27. A patched version of the package is available...

CVE-2024-51744 affecting package application-gateway-kubernetes-ingress for versions less than 1.4.0-25

CVE-2024-51744 affecting package application-gateway-kubernetes-ingress for versions less than 1.4.0-25. A patched version of the package is available...

CVE-2025-30204 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-2

CVE-2025-30204 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-2. A patched version of the package is available...

CVE-2024-35255 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-1

CVE-2024-35255 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-45288 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-1

CVE-2023-45288 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-44487 affecting package application-gateway-kubernetes-ingress for versions less than 1.4.0-15

CVE-2023-44487 affecting package application-gateway-kubernetes-ingress for versions less than 1.4.0-15. A patched version of the package is available...

CVE-2022-41723 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.2-2

CVE-2022-41723 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.2-2. A patched version of the package is available...

CVE-2024-45338 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.2-3

CVE-2024-45338 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.2-3. A patched version of the package is available...

CVE-2024-45338 affecting package application-gateway-kubernetes-ingress for versions less than 1.4.0-24

CVE-2024-45338 affecting package application-gateway-kubernetes-ingress for versions less than 1.4.0-24. A patched version of the package is available...

CVE-2022-3064 affecting package application-gateway-kubernetes-ingress 1.4.0-27

CVE-2022-3064 affecting package application-gateway-kubernetes-ingress 1.4.0-27. This CVE either no longer is or was never applicable...

CVE-2021-4235 affecting package application-gateway-kubernetes-ingress 1.4.0-27

CVE-2021-4235 affecting package application-gateway-kubernetes-ingress 1.4.0-27. This CVE either no longer is or was never applicable...