IN
Product
ingress-nginx
15
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 10Medium 4Low 1
Watch
Add ingress-nginx to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-24514 | 6.5 | Feb 3 | ingress-nginx Admission Controller denial of service Affected: before 1.13.7; before 1.14.3 |
| CVE-2022-4886 | 6.5 | Oct 25 | Ingress-nginx `path` sanitization can be bypassed with `log_format` directive Affected: before 1.8.0 |
| CVE-2021-25748 | 6.5 | May 24 | A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use a newline character to bypass the sanitization of the… Affected: before 1.2.1 |
| CVE-2020-8553 | 5.9 | Jul 29 | The Kubernetes ingress-nginx component prior to version 0.28.0 allows a user with the ability to create namespaces and to read and create ingress objects to overwrite the password… Affected: before 0.28.0 |
Showing 4