GO-2024-2428 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

GO-2026-4426 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

GO-2025-3567 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

GO-2025-3568 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

GO-2026-4417 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

GO-2026-4419 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

GO-2025-3565 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

GO-2025-3566 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

GO-2026-5030 vulnerabilities

Vulnerabilities for packages: flux, caddy, hubble, terraform-provider-acme, vale, gitea, falco-no-driver, telegraf, prometheus, glab, minio, gptscript, grafana-pyroscope, helm, kyverno, zot, crossplane-provider-azure-authorization, fq, traefik, nerdctl, kine, step-issuer, prometheus-operator,...

GO-2026-5028 vulnerabilities

Vulnerabilities for packages: flux, caddy, hubble, terraform-provider-acme, vale, gitea, falco-no-driver, telegraf, prometheus, glab, minio, gptscript, grafana-pyroscope, helm, kyverno, zot, crossplane-provider-azure-authorization, fq, traefik, nerdctl, kine, step-issuer, prometheus-operator,...

GO-2026-4342 vulnerabilities

Vulnerabilities for packages: eksctl, hubble, tfsec, steampipe, vale, cosign, bento, cert-manager-cmctl, falco-no-driver, conftest, telegraf, aactl, croc, aws-flb-kinesis, terraform-provider-pagerduty, minio, helm, kubeflow-katib, thanos-operator, aws-flb-cloudwatch, goreleaser,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: render-template, aws-eks-pod-identity-agent, tekton-chains, nri-memcached, caddy, cni-plugins, chart-testing, grafana-alloy, docker-cli-buildx, k3d, aactl, tkn, helm-push, aws-application-networking-k8s, ip-masq-agent, chartmuseum, rabbitmq-messaging-topology-operato...

CVE-2026-56853

When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. ReadHeaderTimeout is unexpectedly not being applied when doing this...

CVE-2026-56853

When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. ReadHeaderTimeout is unexpectedly not being applied when doing this...

NGINX HTTP Dav Module Alias Directive Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NGINX. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of WebDAV requests. The issue results from the lack of proper validation of...

CVE-2018-16844

creationtimestamp| type| source ---|---|--- 2026-08-12 17:00:04+00:00| published-proof-of-concept| Telegram/JXwhaG7Kk3-6UOVRR1APiaO6CTcjXaQDI8i4is7Q1Jd9s 2026-08-12 17:00:04+00:00| seen| Telegram/C6vVyMDURhpvZI0H3EkJps5fsiSVlluQ8gZPOZtlvYIjgA 2026-08-13 00:00:07+00:00| published-proof-of-concept|...

CVE-2026-63177

Malcolm is a network traffic analysis tool suite. Prior to version 26.07.0, role-based access control enforced in the Nginx OpenResty Lua layer evaluates the raw, unnormalized ngx.var.requesturi, while Nginx itself routes requests using the normalized path. An authenticated low-privilege user can...

CVE-2026-55676

Malcolm is a network traffic analysis tool suite. The file-upload component FilePond PHP backend accepts uploads at POST /server/php/submit.php and stores them in a directory served by the same nginx and php-fpm instance. The allow-list that should restrict accepted file types is an empty array b...

CVE-2026-63177 Malcolm Vulnerable to Authorization Bypass via URI Normalization Differential in Nginx Lua RBAC

Malcolm is a network traffic analysis tool suite. Prior to version 26.07.0, role-based access control enforced in the Nginx OpenResty Lua layer evaluates the raw, unnormalized ngx.var.requesturi, while Nginx itself routes requests using the normalized path. An authenticated low-privilege user can...

CVE-2026-63177

Malcolm is a network traffic analysis tool suite. Prior to version 26.07.0, role-based access control enforced in the Nginx OpenResty Lua layer evaluates the raw, unnormalized ngx.var.requesturi, while Nginx itself routes requests using the normalized path. An authenticated low-privilege user can...