How many kubernetes ingress-nginx CVEs are in CISA KEV?

None of kubernetes ingress-nginx's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of kubernetes ingress-nginx are affected?

377 distinct kubernetes ingress-nginx versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in kubernetes ingress-nginx CVEs?

kubernetes ingress-nginx's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-215 (Insertion of Sensitive Information Into Debugging Code), CWE-444 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')), CWE-653 (Improper Isolation or Compartmentalization).

How many critical kubernetes ingress-nginx vulnerabilities are there?

kubernetes ingress-nginx has 1 critical and 16 high-severity CVEs.

What is the average severity of kubernetes ingress-nginx CVEs?

The average CVSS base score across kubernetes ingress-nginx's scored CVEs is 7.6.

kubernetes ingress-nginx Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: kubernetes ingress-nginx vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

kubernetes ingress-nginx Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

kubernetes ingress-nginx has 23 published CVE records since 2020, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 7 have a known public exploit. The average CVSS base score across scored CVEs is 7.6.

This page aggregates every publicly disclosed vulnerability (CVE) affecting kubernetes ingress-nginx, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of kubernetes ingress-nginx's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High16

Medium5

Low1

In CISA’s Known Exploited Vulnerabilities catalog

None of kubernetes ingress-nginx's CVEs are currently listed in CISA's KEV catalog.

Public exploits

7 of kubernetes ingress-nginx's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every kubernetes ingress-nginx version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

controller-v0.34.020 CVEs
controller-v0.34.120 CVEs
controller-v0.35.020 CVEs
controller-v0.40.020 CVEs
controller-v0.40.120 CVEs
controller-v0.40.220 CVEs
controller-v0.41.020 CVEs
controller-v0.41.120 CVEs
controller-v0.41.220 CVEs
controller-v0.42.020 CVEs
controller-v0.43.020 CVEs

Common weakness types

The CWE weakness categories most often found in kubernetes ingress-nginx CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many kubernetes ingress-nginx CVEs were published each year.

2020

2021

2022

2023

2024

2025

2026

Other kubernetes products

Browse vulnerabilities for other products by kubernetes.

kubernetes75 CVEs cri-o10 CVEs github.com/kubernetes/kubernetes9 CVEs kubelet7 CVEs Kubernetes ingress-nginx4 CVEs Image Builder3 CVEs kube-apiserver3 CVEs minikube

Frequently asked questions

Common questions about kubernetes ingress-nginx vulnerabilities.

How many CVEs does kubernetes ingress-nginx have?: kubernetes ingress-nginx has 23 published CVE records since 2020.
How many kubernetes ingress-nginx CVEs are in CISA KEV?: None of kubernetes ingress-nginx's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for kubernetes ingress-nginx vulnerabilities?: Yes — 7 of kubernetes ingress-nginx's CVEs have a known public exploit.
Which versions of kubernetes ingress-nginx are affected?: 377 distinct kubernetes ingress-nginx versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in kubernetes ingress-nginx CVEs?: kubernetes ingress-nginx's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-215 (Insertion of Sensitive Information Into Debugging Code), CWE-444 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')), CWE-653 (Improper Isolation or Compartmentalization).
How many critical kubernetes ingress-nginx vulnerabilities are there?: kubernetes ingress-nginx has 1 critical and 16 high-severity CVEs.
What is the average severity of kubernetes ingress-nginx CVEs?: The average CVSS base score across kubernetes ingress-nginx's scored CVEs is 7.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track kubernetes ingress-nginx vulnerabilities

Monitor new kubernetes ingress-nginx vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

kubernetes ingress-nginx Vulnerabilities