Threats tagged 'ghsa-c56h-j8gw-3v54'

A security vulnerability in ingress-nginx allows the nginx.ingress.kubernetes.io/rewrite-target annotation to inject arbitrary configuration into nginx. This can lead to arbitrary code execution within the ingress-nginx controller and disclosure of Secrets accessible to the controller, which by default has cluster-wide access to Secrets.