ingress-nginx comment-based nginx configuration injection

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2026-4342 · ADVISORY
• kubernetes/kubernetes · WEB
• kubernetes/ingress-nginx commit 5183b7d · WEB
• kubernetes/ingress-nginx · PACKAGE
• openwall.com/lists/oss-security/2026/03/19/9 · WEB
• GitHub Advisory GHSA-f53h-mxv9-cp98 · ADVISORY

k8s.io/ingress-nginx のその他の脆弱性

• CVE-2026-24514中 6.5A security issue was discovered in ingress-nginx where the validating admission controller feature is subject to a denial of service conditi…
• CVE-2026-24513低 3.1A security issue was discovered in ingress-nginx where the protection afforded by the `auth-url` Ingress annotation may not be effective in …
• CVE-2026-24512高 8.8A security issue was discovered in ingress-nginx where the `rules.http.paths.path` Ingress field can be used to inject configuration into ng…
• CVE-2026-1580高 8.8A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-method` Ingress annotation can be used to injec…
• CVE-2025-24514高 8.8A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-url` Ingress annotation can b…