PT-2026-6529 · Go · K8S.Io/Ingress-Nginx

Publicado 2026-02-05 · Atualizado 2026-02-05

OSV

ingress-nginx's rules.http.paths.path Ingress field can be used to inject configuration into nginx in k8s.io/ingress-nginx.

NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions.

(If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.)

The additional affected modules and versions are: k8s.io/ingress-nginx before v1.13.7, from v1.14.0 before v1.14.3.

Identificadores relacionados

GO-2026-4426

Produtos afetados

K8S.Io/Ingress-Nginx

Referências · 4

• https://github.com/kubernetes/kubernetes/issues/136678 · Nota
• https://osv.dev/vulnerability/GO-2026-4426 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-24512 · Nota de Segurança
• https://github.com/advisories/GHSA-jx8c-56mg-h6vp · Nota