Vulnerabilities (CVE)

Filtered by vendor F5 Subscribe
Filtered by product Nginx Ingress Controller
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-44487 31 Akka, Amazon, Apache and 28 more 127 Http Server, Opensearch Data Prepper, Apisix and 124 more 2023-12-20 N/A 7.5 HIGH
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-23055 1 F5 1 Nginx Ingress Controller 2022-05-03 4.0 MEDIUM 6.5 MEDIUM
On version 2.x before 2.0.3 and 1.x before 1.12.3, the command line restriction that controls snippet use with NGINX Ingress Controller does not apply to Ingress objects. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.