IN
Product
ingress-nginx
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 14Medium 5Low 1
Watch
Add ingress-nginx to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-24514 | 6.5 | Feb 3 | ingress-nginx Admission Controller denial of service Affected: before 1.13.7; before 1.14.3 |
| CVE-2022-4886 | 6.5 | Oct 25 | Ingress-nginx `path` sanitization can be bypassed with `log_format` directive Affected: before 1.8.0 |
| CVE-2021-25748 | 6.5 | May 24 | A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use a newline character to bypass the sanitization of the… Affected: before 1.2.1 |
| CVE-2020-8553 | 5.9 | Jul 29 | The Kubernetes ingress-nginx component prior to version 0.28.0 allows a user with the ability to create namespaces and to read and create ingress objects to overwrite the password… Affected: before 0.28.0 |
| CVE-2025-24513 | 4.8 | Mar 24 | ingress-nginx controller - auth secret file path traversal vulnerability Affected: through 1.11.4; 1.12.0 |
Showing 5