📦 Nginx Ingress Controller

by F5

🔍 What is Nginx Ingress Controller?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2025-14727

HIGH CVSS 8.3 Dec 17, 2025

A vulnerability in NGINX Ingress Controller's nginx.org/rewrite-target annotation validation allows path traversal attacks. This affects Kubernetes clusters using NGINX Ingress Controller with the vul...

CVE-2023-44487

HIGH CVSS 7.5 Oct 10, 2023

CVE-2023-44487 is an HTTP/2 protocol vulnerability that allows attackers to cause denial of service by rapidly resetting streams, consuming server resources. This affects any system using HTTP/2, incl...

CVE-2026-1642

MEDIUM CVSS 5.9 Feb 4, 2026

A vulnerability in NGINX OSS and NGINX Plus allows attackers in a man-in-the-middle position on the upstream server side to inject plain text data into responses from proxied TLS servers. This affects...

CVE-2024-10318

MEDIUM CVSS 5.4 Nov 6, 2024

A session fixation vulnerability in NGINX OpenID Connect reference implementation allows attackers to bind a victim's session to an attacker-controlled account by exploiting missing nonce validation d...