ingress-nginx controller configuration injection via unsanitized auth-url annotation

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Mar 23, 2025 · Kubernetes Security

   Detected

   ingress-nginx controller configuration injection via unsanitized auth-url annotation

Sources

• Kubernetes SecurityVendor advisoryCVE-2025-24514

  ingress-nginx controller configuration injection via unsanitized auth-url annotation

  github.com