Skip to content
OpenAdvisories

Package · Wolfi

ingress-nginx-controller-1.12

32 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2025-24514 Public exploit Scanner template EPSS 37%

    ingress-nginx controller - configuration injection via unsanitized auth-url annotation

    A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-url` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx …

    Kubernetes ingress-nginx ingress-nginx-controller-1.12 k8s.io/ingress-nginx Wolfi Go
  • High 8.8
    CVE-2025-1098 Public exploit Scanner template EPSS 86%

    ingress-nginx controller - configuration injection via unsanitized mirror annotations

    A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `mirror-target` and `mirror-host` Ingress annotations can be used to inject arbitrary configuration into nginx. This can lead to arbitrary code execution in…

    Kubernetes ingress-nginx ingress-nginx-controller-1.12 k8s.io/ingress-nginx Wolfi Go
  • High 8.8
    CVE-2025-1097 Public exploit Scanner template EPSS 37%

    ingress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotation

    A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-tls-match-cn` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingre…

    Kubernetes ingress-nginx ingress-nginx-controller-1.12 k8s.io/ingress-nginx Wolfi Go