MEDIUM4.8Go
GHSA-242m-6h72-7hgp· CVE-2025-24513, GO-2025-3564ingress-nginx controller - auth secret file path traversal vulnerability
Modified: 9/10/2026
package
Go/k8s.io/ingress-nginx
pkg:go/k8s.io/ingress-nginx
MEDIUM6.5Go
GHSA-2pf9-vr92-6h3v· CVE-2026-24514, GO-2026-4417ingress-nginx vulnerable to Allocation of Resources Without Limits or Throttling
Modified: 9/10/2026
LOW3.1Go
GHSA-4g2f-xcph-2335· CVE-2026-24513, GO-2026-4419ingress-nginx has Improper Check for Unusual or Exceptional Conditions
Modified: 9/10/2026
HIGH7.6Go
GHSA-5wj4-wffq-3378· CVE-2023-5043Ingress nginx annotation injection causes arbitrary command execution
Modified: 8/7/2026
HIGH8.8Go
GHSA-823x-fv5p-h7hw· CVE-2025-1097, GO-2025-3565ngress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotation
Modified: 9/10/2026
MEDIUM6.5Go
GHSA-863x-868h-968x· CVE-2021-25748Ingress-nginx `path` sanitization can be bypassed with newline character
Modified: 8/7/2026
HIGH8.8Go
GHSA-9h3p-52vh-959w· CVE-2026-1580, GO-2026-4423ingress-nginx's `nginx.ingress.kubernetes.io/auth-method` Ingress annotation can be used to inject configuration into nginx
Modified: 9/10/2026
HIGH8.8Go
GHSA-f53h-mxv9-cp98· CVE-2026-4342, GO-2026-4796ingress-nginx comment-based nginx configuration injection
Modified: 5/20/2026
HIGH7.6Go
GHSA-fp9f-44c2-cw27· CVE-2023-5044, GO-2024-2428Ingress-nginx code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation
Modified: 9/10/2026
HIGH8.8Go
GHSA-fwwp-xcxw-39vq· CVE-2025-24514, GO-2025-3566ingress-nginx controller - configuration injection via unsanitized auth-url annotation
Modified: 9/10/2026
HIGH8.8Go
GHSA-gvrm-w2f9-f77q· CVE-2022-4886Ingress-nginx path sanitization can be bypassed
Modified: 8/7/2026
MEDIUM5.9Go
GHSA-hhpm-74pm-hf35· CVE-2020-8553ingress-nginx component for Kubernetes allows file overwrite
Modified: 8/7/2026
HIGH8.8Go
GHSA-jx8c-56mg-h6vp· CVE-2026-24512, GO-2026-4426ingress-nginx's `rules.http.paths.path` Ingress field can be used to inject configuration into nginx
Modified: 9/10/2026
CRITICAL9.8Go
GHSA-mgvx-rpfc-9mpv· CVE-2025-1974, GO-2025-3567ingress-nginx admission controller RCE escalation
Modified: 9/10/2026
MEDIUM5.3Go
GHSA-p3x5-5xpx-9phm· CVE-2018-1002104Kubernetes ingress exposes sensitive information
Modified: 9/10/2026
HIGH8.1Go
GHSA-pvmg-xgmx-9mxh· CVE-2021-25745Improper Input Validation in k8s.io/ingress-nginx
Modified: 8/7/2026
HIGH8.8Go
GHSA-vg63-w3p9-jc9m· CVE-2025-1098, GO-2025-3568ingress-nginx controller - configuration injection via unsanitized mirror annotations
Modified: 9/10/2026
—Go
GO-2024-2428· CVE-2023-5044, GHSA-fp9f-44c2-cw27Ingress-nginx code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation in k8s.io/ingress-nginx
Modified: 5/20/2026
—Go
GO-2025-3564· CVE-2025-24513, GHSA-242m-6h72-7hgpingress-nginx controller - auth secret file path traversal vulnerability in k8s.io/ingress-nginx
Modified: 5/20/2026
—Go
GO-2025-3565· CVE-2025-1097, GHSA-823x-fv5p-h7hwngress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotation in k8s.io/ingress-nginx
Modified: 5/20/2026
—Go
GO-2025-3566· CVE-2025-24514, GHSA-fwwp-xcxw-39vqingress-nginx controller - configuration injection via unsanitized auth-url annotation in k8s.io/ingress-nginx
Modified: 5/20/2026
—Go
GO-2025-3567· CVE-2025-1974, GHSA-mgvx-rpfc-9mpvingress-nginx admission controller RCE escalation in k8s.io/ingress-nginx
Modified: 5/20/2026
—Go
GO-2025-3568· CVE-2025-1098, GHSA-vg63-w3p9-jc9mingress-nginx controller - configuration injection via unsanitized mirror annotations in k8s.io/ingress-nginx
Modified: 5/20/2026
—Go
GO-2026-4417· CVE-2026-24514, GHSA-2pf9-vr92-6h3vingress-nginx vulnerable to Allocation of Resources Without Limits or Throttling in k8s.io/ingress-nginx
Modified: 6/19/2026
—Go
GO-2026-4419· CVE-2026-24513, GHSA-4g2f-xcph-2335ingress-nginx has Improper Check for Unusual or Exceptional Conditions in k8s.io/ingress-nginx
Modified: 6/19/2026
—Go
GO-2026-4423· CVE-2026-1580, GHSA-9h3p-52vh-959wingress-nginx's `nginx.ingress.kubernetes.io/auth-method` Ingress annotation can be used to inject configuration into nginx in k8s.io/ingress-nginx
Modified: 6/19/2026
—Go
GO-2026-4426· CVE-2026-24512, GHSA-jx8c-56mg-h6vpingress-nginx's `rules.http.paths.path` Ingress field can be used to inject configuration into nginx in k8s.io/ingress-nginx
Modified: 6/19/2026
—Go
GO-2026-4796· CVE-2026-4342, GHSA-f53h-mxv9-cp98ingress-nginx comment-based nginx configuration injection in k8s.io/ingress-nginx
Modified: 5/20/2026