PT-2026-42386

Kong Ingress Controller for Kubernetes KIC: Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller...

GHSA-M23H-6MWM-39M8 Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation

Summary A vulnerability in the Kong Ingress Controller KIC allows for the unauthorized exfiltration of TLS certificates and private keys across Kubernetes namespace boundaries. In "managed" mode where the GatewayClass lacks an unmanaged annotation, the Gateway TLS translator skips critical status...

Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint

Summary A vulnerability in the Kong Ingress Controller KIC allows for the unauthorized exposure of sensitive plugin credentials through the diagnostics interface. Even when configured to redact sensitive information using --dump-sensitive-config=false, KIC fails to sanitize the Plugins field in...

GHSA-3278-C88V-XRH4 Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint

Summary A vulnerability in the Kong Ingress Controller KIC allows for the unauthorized exposure of sensitive plugin credentials through the diagnostics interface. Even when configured to redact sensitive information using --dump-sensitive-config=false, KIC fails to sanitize the Plugins field in...

PT-2026-42362

Summary A vulnerability in the Kong Ingress Controller KIC allows for the unauthorized exposure of sensitive plugin credentials through the diagnostics interface. Even when configured to redact sensitive information using --dump-sensitive-config=false, KIC fails to sanitize the Plugins field in...

ingress-nginx Configuration Injection

A security issue was discovered in ingress-nginx where the nginx.ingress.kubernetes.io/rewrite-target Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible t...

Contour 代码注入漏洞

Contour is an open-source Kubernetes ingress controller that uses Envoy proxies. Versions of Contour from v1.19.0 to v1.33.4, v1.32.5 before v1.32.5, and v1.31.6 before v1.31.6 had a code injection vulnerability. This vulnerability stemmed from the Cookie rewriting feature, which was vulnerable t...

CVE-2026-27143 vulnerabilities

Vulnerabilities for packages: spire-server, telegraf, howdy-yall, go, buf, docker-cli, dgraph, gofumpt, harbor, regclient, cadvisor, net-kourier, wireguard-go, gitaly, apisix-ingress-controller, gitleaks, istio, cni-plugins, cloud-provider-aws, nri-mssql, prometheus, newrelic-nri-statsd,...

GHSA-CFP9-33RC-J74F vulnerabilities

Vulnerabilities for packages: spire-server, telegraf, howdy-yall, go, buf, docker-cli, dgraph, gofumpt, harbor, regclient, cadvisor, net-kourier, wireguard-go, gitaly, apisix-ingress-controller, gitleaks, istio, cni-plugins, cloud-provider-aws, nri-mssql, prometheus, newrelic-nri-statsd,...

CVE-2026-27144 vulnerabilities

Vulnerabilities for packages: spire-server, telegraf, howdy-yall, go, buf, docker-cli, dgraph, gofumpt, harbor, regclient, cadvisor, net-kourier, wireguard-go, gitaly, apisix-ingress-controller, gitleaks, istio, cni-plugins, cloud-provider-aws, nri-mssql, prometheus, newrelic-nri-statsd,...

GHSA-CQRX-3M42-5P5W vulnerabilities

Vulnerabilities for packages: spire-server, telegraf, howdy-yall, go, buf, docker-cli, dgraph, gofumpt, harbor, regclient, cadvisor, net-kourier, wireguard-go, gitaly, apisix-ingress-controller, gitleaks, istio, cni-plugins, cloud-provider-aws, nri-mssql, prometheus, newrelic-nri-statsd,...

GHSA-CFP9-33RC-J74F vulnerabilities

Vulnerabilities for packages: external-secrets-operator, prometheus-operator-fips, crossplane-function-environment-configs, go, rke2-runtime-fips, terraform-fips, argo-workflows-fips, kube-arangodb, kube-conformance, azurefile-csi-fips, tekton-pipelines-fips, coredns, fuse-overlayfs-snapshotter,...

GHSA-CQRX-3M42-5P5W vulnerabilities

Vulnerabilities for packages: external-secrets-operator, prometheus-operator-fips, crossplane-function-environment-configs, go, rke2-runtime-fips, terraform-fips, argo-workflows-fips, kube-arangodb, kube-conformance, azurefile-csi-fips, tekton-pipelines-fips, coredns, fuse-overlayfs-snapshotter,...

CVE-2026-27143 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, prometheus-operator-fips, crossplane-function-environment-configs, go, rke2-runtime-fips, terraform-fips, argo-workflows-fips, kube-arangodb, kube-conformance, azurefile-csi-fips, tekton-pipelines-fips, coredns, fuse-overlayfs-snapshotter,...

CVE-2026-27144 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, prometheus-operator-fips, crossplane-function-environment-configs, go, rke2-runtime-fips, terraform-fips, argo-workflows-fips, kube-arangodb, kube-conformance, azurefile-csi-fips, tekton-pipelines-fips, coredns, fuse-overlayfs-snapshotter,...

ingress-nginx comment-based nginx configuration injection

A security issue was discovered in ingress-nginx where a combination of Ingress annotations can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. Note that i...

GHSA-F53H-MXV9-CP98 ingress-nginx comment-based nginx configuration injection

A security issue was discovered in ingress-nginx where a combination of Ingress annotations can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. Note that i...

Kubernetes ingress-nginx 安全漏洞

Kubernetes ingress-nginx is a Kubernetes entry controller open-sourced by the Cloud Native Computing Foundation. It uses NGINX as a reverse proxy and load balancer. There is a security vulnerability in Kubernetes ingress-nginx. This vulnerability stems from the Ingress annotation combination, whi...

BIT-NGINX-INGRESS-CONTROLLER-2026-3288 ingress-nginx rewrite-target nginx configuration injection

A security issue was discovered in ingress-nginx where the nginx.ingress.kubernetes.io/rewrite-target Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible t...

Security Bulletin: IBM Cloud Kubernetes Service is affected by Kubernetes Ingress Controller security vulnerability (CVE-2026-3288)

Summary IBM Cloud Kubernetes Service is affected by Kubernetes Ingress Controller security vulnerability CVE-2026-3288. A security issue was discovered in ingress-nginx where the nginx.ingress.kubernetes.io/rewrite-target Ingress annotation can be used to inject configuration into nginx. This can...