Skip to content
OpenAdvisories

Package · Go

k8s.io/ingress-nginx

17 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.8
    CVE-2026-4342 Public exploit

    ingress-nginx comment-based nginx configuration injection

    A security issue was discovered in ingress-nginx where a combination of Ingress annotations can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets acc…

    Kubernetes ingress-nginx k8s.io/ingress-nginx Go
  • Medium 6.5
    CVE-2026-24514 Public exploit

    ingress-nginx Admission Controller denial of service

    A security issue was discovered in ingress-nginx where the validating admission controller feature is subject to a denial of service condition. By sending large requests to the validating admission controller, an attacker can cause memory consumption, which m…

    Kubernetes ingress-nginx ingress-nginx-controller-1.12 k8s.io/ingress-nginx Wolfi Go
  • High 8.8
    CVE-2025-24514 Public exploit Scanner template EPSS 37%

    ingress-nginx controller - configuration injection via unsanitized auth-url annotation

    A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-url` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx …

    Kubernetes ingress-nginx ingress-nginx-controller-1.12 k8s.io/ingress-nginx Wolfi Go
  • High 8.8
    CVE-2025-1098 Public exploit Scanner template EPSS 86%

    ingress-nginx controller - configuration injection via unsanitized mirror annotations

    A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `mirror-target` and `mirror-host` Ingress annotations can be used to inject arbitrary configuration into nginx. This can lead to arbitrary code execution in…

    Kubernetes ingress-nginx ingress-nginx-controller-1.12 k8s.io/ingress-nginx Wolfi Go
  • High 8.8
    CVE-2025-1097 Public exploit Scanner template EPSS 37%

    ingress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotation

    A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-tls-match-cn` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingre…

    Kubernetes ingress-nginx ingress-nginx-controller-1.12 k8s.io/ingress-nginx Wolfi Go
  • Critical 9.8
    CVE-2025-1974 Public exploit Scanner template EPSS 99%

    ingress-nginx admission controller RCE escalation

    A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secret…

    Kubernetes ingress-nginx ingress-nginx-controller-1.12 k8s.io/ingress-nginx Wolfi Go
  • High 7.6
    CVE-2023-5044 Public exploit EPSS 54%

    Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation

    Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation.

    Kubernetes ingress-nginx k8s.io/ingress-nginx Go
  • High 7.6
    CVE-2023-5043 Public exploit

    Ingress nginx annotation injection causes arbitrary command execution

    Ingress nginx annotation injection causes arbitrary command execution.

    Kubernetes ingress-nginx k8s.io/ingress-nginx Go