Improper Input Validation in k8s.io/ingress-nginx

Description

References

• nvd.nist.gov/vuln/detail/CVE-2021-25745 · ADVISORY
• kubernetes/ingress-nginx · WEB
• kubernetes/ingress-nginx · PACKAGE
• groups.google.com/g/kubernetes-security-announce/c/7vQrpDZeBlc · WEB
• security.netapp.com/advisory/ntap-20220609-0006 · WEB
• security.netapp.com/advisory/ntap-20220609-0006 · Third Party Advisory

Autres vulnérabilités de k8s.io/ingress-nginx

• CVE-2026-4342ÉLEVÉE 8.8A security issue was discovered in ingress-nginx where a combination of Ingress annotations can be used to inject configuration into nginx. …
• CVE-2026-24514MOYENNE 6.5A security issue was discovered in ingress-nginx where the validating admission controller feature is subject to a denial of service conditi…
• CVE-2026-24513FAIBLE 3.1A security issue was discovered in ingress-nginx where the protection afforded by the `auth-url` Ingress annotation may not be effective in …
• CVE-2026-24512ÉLEVÉE 8.8A security issue was discovered in ingress-nginx where the `rules.http.paths.path` Ingress field can be used to inject configuration into ng…
• CVE-2026-1580ÉLEVÉE 8.8A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-method` Ingress annotation can be used to injec…