Поиск уязвимостей
Количество 5
Количество 5
CVE-2025-15566
A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-proxy-set-headers` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)
ROS-20260310-80-0048
Уязвимость golang-k8s-ingress-nginx
GHSA-whpv-427c-7hc3
A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-proxy-set-headers` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)
BDU:2026-03604
Уязвимость контроллера входящего трафика в кластере Kubernetes ingress-nginx, связанная с недостаточной проверкой вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20260310-73-0049
Уязвимость golang-k8s-ingress-nginx
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-15566 A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-proxy-set-headers` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.) | CVSS3: 8.8 | 1% Низкий | 9 месяцев назад |
 | ROS-20260310-80-0048 Уязвимость golang-k8s-ingress-nginx | CVSS3: 8.8 | 1% Низкий | 8 месяцев назад |
| GHSA-whpv-427c-7hc3 A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-proxy-set-headers` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.) | CVSS3: 8.8 | 1% Низкий | 9 месяцев назад |
 | BDU:2026-03604 Уязвимость контроллера входящего трафика в кластере Kubernetes ingress-nginx, связанная с недостаточной проверкой вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 8.8 | 1% Низкий | 9 месяцев назад |
| ROS-20260310-73-0049 Уязвимость golang-k8s-ingress-nginx | CVSS3: 8.8 | 1% Низкий | 8 месяцев назад |
Уязвимостей на страницу