Affected by GO-2024-2428
and 5 other vulnerabilities
GO-2024-2428: Ingress-nginx code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation in k8s.io/ingress-nginx
GO-2025-3564: ingress-nginx controller - auth secret file path traversal vulnerability in k8s.io/ingress-nginx
GO-2025-3565: ngress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotation in k8s.io/ingress-nginx
GO-2025-3566: ingress-nginx controller - configuration injection via unsanitized auth-url annotation in k8s.io/ingress-nginx
GO-2025-3567: ingress-nginx admission controller RCE escalation in k8s.io/ingress-nginx
GO-2025-3568: ingress-nginx controller - configuration injection via unsanitized mirror annotations in k8s.io/ingress-nginx
directory
Version:
v1.0.0-alpha.1
Opens a new window with list of versions in this module.
Published: Jun 23, 2021
License: Apache-2.0
Opens a new window with license information.
Directories
¶
Click to show internal directories.
Click to hide internal directories.