k8s.io/ingress-nginx vulnerabilities (Go)
17 vulnerabilities.
k8s.io/ingress-nginxGoingress-nginx comment-based nginx configuration injection8.8 Highk8s.io/ingress-nginxGoingress-nginx Admission Controller denial of service6.5 Mediumk8s.io/ingress-nginxGoingress-nginx auth-url protection bypass3.1 Lowk8s.io/ingress-nginxGoingress-nginx auth-method nginx configuration injection8.8 Highk8s.io/ingress-nginxGoingress-nginx auth-method nginx configuration injection8.8 Highk8s.io/ingress-nginxGoingress-nginx controller - configuration injection via unsanitized auth-url annotation8.8 Highk8s.io/ingress-nginxGoingress-nginx controller - auth secret file path traversal vulnerability4.8 Mediumk8s.io/ingress-nginxGoingress-nginx controller - configuration injection via unsanitized mirror annotations8.8 Highk8s.io/ingress-nginxGoingress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotation8.8 Highk8s.io/ingress-nginxGoingress-nginx admission controller RCE escalation9.8 Criticalk8s.io/ingress-nginxGoCode injection via nginx.ingress.kubernetes.io/permanent-redirect annotation7.6 Highk8s.io/ingress-nginxGoIngress nginx annotation injection causes arbitrary command execution7.6 Highk8s.io/ingress-nginxGoIngress-nginx `path` sanitization can be bypassed with `log_format` directive8.8 Highk8s.io/ingress-nginxGoIngress-nginx `path` sanitization can be bypassed with newline character7.6 Highk8s.io/ingress-nginxGoIngress-nginx path can be pointed to service account token file7.6 Highk8s.io/ingress-nginxGoKubernetes ingress-nginx Compromise of auth via subset/superset namespace names5.9 Mediumk8s.io/ingress-nginxGoKubernetes ingress exposes sensitive information5.3 Medium