How many k8s.io k8s.io/ingress-nginx CVEs are in CISA KEV?

None of k8s.io k8s.io/ingress-nginx's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of k8s.io k8s.io/ingress-nginx are affected?

22 distinct k8s.io k8s.io/ingress-nginx versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in k8s.io k8s.io/ingress-nginx CVEs?

k8s.io k8s.io/ingress-nginx's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-215 (Insertion of Sensitive Information Into Debugging Code), CWE-653 (Improper Isolation or Compartmentalization), CWE-73 (External Control of File Name or Path).

How many critical k8s.io k8s.io/ingress-nginx vulnerabilities are there?

k8s.io k8s.io/ingress-nginx has 1 critical and 11 high-severity CVEs.

What is the average severity of k8s.io k8s.io/ingress-nginx CVEs?

The average CVSS base score across k8s.io k8s.io/ingress-nginx's scored CVEs is 7.6.

k8s.io k8s.io/ingress-nginx Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: k8s.io k8s.io/ingress-nginx vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

k8s.io k8s.io/ingress-nginx Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

k8s.io k8s.io/ingress-nginx has 17 published CVE records since 2020, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 4 have a known public exploit. The average CVSS base score across scored CVEs is 7.6.

This page aggregates every publicly disclosed vulnerability (CVE) affecting k8s.io k8s.io/ingress-nginx, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of k8s.io k8s.io/ingress-nginx's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High11

Medium4

Low1

In CISA’s Known Exploited Vulnerabilities catalog

None of k8s.io k8s.io/ingress-nginx's CVEs are currently listed in CISA's KEV catalog.

Public exploits

4 of k8s.io k8s.io/ingress-nginx's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every k8s.io k8s.io/ingress-nginx version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1.11.55 CVEs
1.12.0-beta.0 <= v < 1.12.15 CVEs
< 1.13.74 CVEs
1.14.0 <= v < 1.14.34 CVEs
< 1.9.02 CVEs
< 0.0.0-20260319175635-5183b7d861371 CVE
< 0.28.01 CVE
< 1.2.01 CVE
< 1.2.11 CVE
< 1.51 CVE
< 1.8.01 CVE

Fixed in

Common weakness types

The CWE weakness categories most often found in k8s.io k8s.io/ingress-nginx CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many k8s.io k8s.io/ingress-nginx CVEs were published each year.

2020

2022

2023

2025

2026

Other k8s.io products

Browse vulnerabilities for other products by k8s.io.

k8s.io/kubernetes50 CVEs k8s.io/client-go3 CVEs k8s.io/apiextensions-apiserver1 CVEs k8s.io/apimachinery1 CVEs k8s.io/apiserver1 CVEs k8s.io/kops1 CVEs k8s.io/kubernetes/cmd/kube-apiserver1 CVEs

Frequently asked questions

Common questions about k8s.io k8s.io/ingress-nginx vulnerabilities.

How many CVEs does k8s.io k8s.io/ingress-nginx have?: k8s.io k8s.io/ingress-nginx has 17 published CVE records since 2020.
How many k8s.io k8s.io/ingress-nginx CVEs are in CISA KEV?: None of k8s.io k8s.io/ingress-nginx's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for k8s.io k8s.io/ingress-nginx vulnerabilities?: Yes — 4 of k8s.io k8s.io/ingress-nginx's CVEs have a known public exploit.
Which versions of k8s.io k8s.io/ingress-nginx are affected?: 22 distinct k8s.io k8s.io/ingress-nginx versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in k8s.io k8s.io/ingress-nginx CVEs?: k8s.io k8s.io/ingress-nginx's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-215 (Insertion of Sensitive Information Into Debugging Code), CWE-653 (Improper Isolation or Compartmentalization), CWE-73 (External Control of File Name or Path).
How many critical k8s.io k8s.io/ingress-nginx vulnerabilities are there?: k8s.io k8s.io/ingress-nginx has 1 critical and 11 high-severity CVEs.
What is the average severity of k8s.io k8s.io/ingress-nginx CVEs?: The average CVSS base score across k8s.io k8s.io/ingress-nginx's scored CVEs is 7.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track k8s.io k8s.io/ingress-nginx vulnerabilities

Monitor new k8s.io k8s.io/ingress-nginx vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing