Loading HuntDB...

GHSA-gvrm-w2f9-f77q

GitHub Security Advisory

Ingress-nginx path sanitization can be bypassed

✓ GitHub Reviewed HIGH Has CVE

Advisory Details

Ingress-nginx `path` sanitization can be bypassed with `log_format` directive.

Affected Packages

Go k8s.io/ingress-nginx
Affected versions: 0 (fixed in 1.8.0)

Related CVEs

Key Information

GHSA ID
GHSA-gvrm-w2f9-f77q
Published
October 25, 2023 9:30 PM
Last Modified
February 13, 2025 7:18 PM
CVSS Score
7.5 /10
Primary Ecosystem
Go
Primary Package
k8s.io/ingress-nginx
GitHub Reviewed
✓ Yes

Dataset

Last updated: July 27, 2025 6:18 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.