Skip to content
OpenAdvisories

Product · Kubernetes

ingress-nginx

18 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-24514 Public exploit

    ingress-nginx Admission Controller denial of service

    A security issue was discovered in ingress-nginx where the validating admission controller feature is subject to a denial of service condition. By sending large requests to the validating admission controller, an attacker can cause memory consumption, which m…

    Kubernetes ingress-nginx ingress-nginx-controller-1.12 k8s.io/ingress-nginx Wolfi Go
  • Medium 4.8
    CVE-2025-24513

    ingress-nginx controller - auth secret file path traversal vulnerability

    A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where attacker-provided data are included in a filename by the ingress-nginx Admission Controller feature, resulting in directory traversal within the container. This…

    Kubernetes ingress-nginx ingress-nginx-controller-1.12 k8s.io/ingress-nginx Wolfi Go
  • Medium 5.9
    CVE-2020-8553

    Kubernetes ingress-nginx Compromise of auth via subset/superset namespace names

    The Kubernetes ingress-nginx component prior to version 0.28.0 allows a user with the ability to create namespaces and to read and create ingress objects to overwrite the password file of another ingress which uses nginx.ingress.kubernetes.io/auth-type: basic…

    Kubernetes ingress-nginx k8s.io/ingress-nginx Go