Kubernetes ingress-nginx
- Software type
- Other
- Total vulnerabilities (90 days)
- 0
Unreliable vulnerability data
en
Verify to analyze this security profile
As of 10/23/2026, Kubernetes ingress-nginx recorded 0 security vulnerabilities in the last 90 days, of which 0 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Kubernetes ingress-nginx and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2021-25748Ingress-nginx `path` sanitization can be bypassed with newline characterCVE-2021-25746Ingress-nginx directive injection via annotationsCVE-2021-25745Ingress-nginx path can be pointed to service account token fileCVE-2021-25742Ingress-nginx custom snippets allows retrieval of ingress-nginx serviceaccount token and secrets across all namespaces| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2021-25748Ingress-nginx `path` sanitization can be bypassed with newline character | Exploitation statusNot exploited | FixYes | Published05/24/2023 | SeverityHigh |
CVE-2021-25746Ingress-nginx directive injection via annotations | Exploitation statusNot confirmed | FixYes | Published05/06/2022 | SeverityHigh |
CVE-2021-25745Ingress-nginx path can be pointed to service account token file | Exploitation statusNot confirmed | FixYes | Published05/06/2022 | SeverityHigh |
CVE-2021-25742Ingress-nginx custom snippets allows retrieval of ingress-nginx serviceaccount token and secrets across all namespaces | Exploitation statusNot confirmed | FixNo | Published10/29/2021 | SeverityHigh |
4 Results | Page 1 of 1