How many Kubernetes ingress-nginx CVEs are in CISA KEV?

None of Kubernetes ingress-nginx's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for Kubernetes ingress-nginx vulnerabilities?

Yes — 1 of Kubernetes ingress-nginx's CVEs have a known public exploit.

Which versions of Kubernetes ingress-nginx are affected?

8 distinct Kubernetes ingress-nginx versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Kubernetes ingress-nginx CVEs?

Kubernetes ingress-nginx's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation).

What is the average severity of Kubernetes ingress-nginx CVEs?

The average CVSS base score across Kubernetes ingress-nginx's scored CVEs is 7.7.

Kubernetes ingress-nginx Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Kubernetes ingress-nginx vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Overview

Kubernetes ingress-nginx has 4 published CVE records since 2021, of which none are in CISA's KEV catalog and 1 has a known public exploit. The average CVSS base score across scored CVEs is 7.7.

Severity and exploitation

How the CVSS severity of Kubernetes ingress-nginx's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High4

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of Kubernetes ingress-nginx's CVEs are currently listed in CISA's KEV catalog.

Public exploits

One of Kubernetes ingress-nginx's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every Kubernetes ingress-nginx version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1.2.02 CVEs
< 1.2.11 CVE
<= 0.49.01 CVE
<= 1.0.01 CVE
>= next of 0.49.01 CVE
>= next of 1.0.01 CVE

Fixed in

1.2.02 CVEs
1.2.11 CVE

Find a version

4 CVEs

Sort

Ingress-nginx `path` sanitization can be bypassed with newline character
CVE-2021-25748
Patch
CWE-20
High · CVSS 7.6
EPSS 0.7% (53th pct)2023-05-24
Ingress-nginx directive injection via annotations
CVE-2021-25746
Patch
CWE-20
High · CVSS 7.6
EPSS 1.4% (73th pct)2022-05-06
Ingress-nginx path can be pointed to service account token file
CVE-2021-25745
Patch
CWE-20
High · CVSS 8.1
EPSS 1.2% (68th pct)2022-05-06
Ingress-nginx custom snippets allows retrieval of ingress-nginx serviceaccount token and secrets across all namespaces
CVE-2021-25742
Public exploit
Patch
Workaround
CWE-20
High · CVSS 7.6
EPSS 2.1% (82th pct)2021-10-29

Common weakness types

The CWE weakness categories most often found in Kubernetes ingress-nginx CVEs. Follow any weakness for its full explanation.

CWE-20Improper Input Validation4 CVEs

Disclosure activity by year

How many Kubernetes ingress-nginx CVEs were published each year.

2021

2022

2023

Other Kubernetes products

Browse vulnerabilities for other products by Kubernetes.

Kubernetes78 CVEs ingress-nginx24 CVEs cri-o10 CVEs github.com/kubernetes/kubernetes9 CVEs Kubelet7 CVEs Image Builder3 CVEs kube-apiserver3 CVEs

Frequently asked questions

Common questions about Kubernetes ingress-nginx vulnerabilities.

How many CVEs does Kubernetes ingress-nginx have?: Kubernetes ingress-nginx has 4 published CVE records since 2021.
How many Kubernetes ingress-nginx CVEs are in CISA KEV?: None of Kubernetes ingress-nginx's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Kubernetes ingress-nginx vulnerabilities?: Yes — 1 of Kubernetes ingress-nginx's CVEs have a known public exploit.
Which versions of Kubernetes ingress-nginx are affected?: 8 distinct Kubernetes ingress-nginx versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Kubernetes ingress-nginx CVEs?: Kubernetes ingress-nginx's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation).
What is the average severity of Kubernetes ingress-nginx CVEs?: The average CVSS base score across Kubernetes ingress-nginx's scored CVEs is 7.7.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Kubernetes ingress-nginx vulnerabilities

Get an alert for each new Kubernetes ingress-nginx CVE, with AI-written analysis and remediation steps.

Create an account See pricing