Posted by Tabitha Sable on Nov 05 Hello Kubernetes Community, A security issue was discovered in ingress-nginx where a user with permission to create an Ingress may be able to cause denial of service of the ingress-nginx data plane, or possibly redirect traffic from other Ingresses. Kubernetes clusters are only affected if they are using ingress-nginx. Kubernetes will not be issuing a fix for this CVE, because ingress-nginx maintenance ended in March 2026.

Read the full article at oss-security →