Skip to content
OpenAdvisories

Package · Wolfi

ingress-nginx-controller-1.12

32 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-24514 Public exploit

    ingress-nginx Admission Controller denial of service

    A security issue was discovered in ingress-nginx where the validating admission controller feature is subject to a denial of service condition. By sending large requests to the validating admission controller, an attacker can cause memory consumption, which m…

    Kubernetes ingress-nginx ingress-nginx-controller-1.12 k8s.io/ingress-nginx Wolfi Go
  • High 8.8
    CVE-2025-24514 Public exploit Scanner template EPSS 37%

    ingress-nginx controller - configuration injection via unsanitized auth-url annotation

    A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-url` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx …

    Kubernetes ingress-nginx ingress-nginx-controller-1.12 k8s.io/ingress-nginx Wolfi Go
  • High 8.8
    CVE-2025-1098 Public exploit Scanner template EPSS 86%

    ingress-nginx controller - configuration injection via unsanitized mirror annotations

    A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `mirror-target` and `mirror-host` Ingress annotations can be used to inject arbitrary configuration into nginx. This can lead to arbitrary code execution in…

    Kubernetes ingress-nginx ingress-nginx-controller-1.12 k8s.io/ingress-nginx Wolfi Go
  • High 8.8
    CVE-2025-1097 Public exploit Scanner template EPSS 37%

    ingress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotation

    A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-tls-match-cn` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingre…

    Kubernetes ingress-nginx ingress-nginx-controller-1.12 k8s.io/ingress-nginx Wolfi Go
  • Critical 9.8
    CVE-2025-1974 Public exploit Scanner template EPSS 99%

    ingress-nginx admission controller RCE escalation

    A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secret…

    Kubernetes ingress-nginx ingress-nginx-controller-1.12 k8s.io/ingress-nginx Wolfi Go
  • Medium 4.4
    CVE-2025-22870 Public exploit

    HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

    Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be prox…

    Go standard library golang.org/x/net net/http golang.org/x/net/http/httpproxy Debian Ubuntu Azure Linux Alpine Wolfi Go