Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.7When the ngx_mail_auth_http_module module is enabled on NGINX Plus or NGINX Open Source, undisclosed requests can cause worker processes to terminate.Mar 24, 2026
- High7.5VU#948176: Multiple TLS Libraries can Bypass Delegation EnforcementMar 19, 2026
- Low1.2An integer overflow vulnerability existed in the static function wolfssl_add_to_chain, that caused heap corruption when certificate data was written out of bounds of a…Mar 19, 2026
- High8.8A security issue was discovered in ingress-nginx where a combination of Ingress annotations can be used to inject configuration into nginx.Mar 19, 2026
- High8.6Kan is an open-source project management tool.KEVMar 19, 2026
- High8.8Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers.Mar 18, 2026
- High7.0Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in Erlang OTP (inets httpd module) allows HTTP Request Smuggling.Mar 13, 2026
- High8.8A security issue was discovered in ingress-nginx where the Ingress annotation can be used to inject configuration into nginx.Mar 9, 2026
- Critical9.8Nginx UI is a web user interface for the Nginx web server.KEVMar 5, 2026
- High8.7TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32.Feb 26, 2026
- High8.7TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32.Feb 26, 2026
- Unknowningress-nginx auth-proxy-set-headers nginx configuration injectionEPSS 0.5%Feb 6, 2026
- Unknowningress-nginx Admission Controller denial of serviceFeb 2, 2026
- Unknowningress-nginx auth-url protection bypassFeb 2, 2026
- Unknowningress-nginx rules.http.paths.path nginx configuration injectionFeb 2, 2026
- Unknowningress-nginx auth-method nginx configuration injectionEPSS 0.5%Feb 2, 2026
- Medium5.9Traefik is an HTTP reverse proxy and load balancer.EPSS 0.2%Dec 9, 2025
- Unknowngl-inet gl-ax1800_firmware Improper AuthenticationKEVSep 3, 2025
- Unknownroxy-wi roxy-wi Improper Neutralization of Special Elements used in a Command ('Command Injection')KEVJun 3, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net/smc: fix NULL sndbuf_desc in smc_cdc_tx_handler() When performing a stress test on SMC-R by rmm…EPSS 0.5%May 2, 2025
- Unknownkubernetes ingress-nginx Improper Isolation or CompartmentalizationKEVEPSS 99.4%Mar 23, 2025
- Unknowningress-nginx controller configuration injection via unsanitized mirror annotationsEPSS 82.3%Mar 23, 2025
- Unknowningress-nginx controller configuration injection via unsanitized auth-tls-match-cn annotationEPSS 33.2%Mar 23, 2025
- Unknowningress-nginx controller configuration injection via unsanitized auth-url annotationEPSS 30.5%Mar 23, 2025
- Unknowningress-nginx controller auth secret file path traversal vulnerabilityEPSS 3.3%Mar 23, 2025