최근 6개월의 모든 CVE를 매일 업데이트합니다.

5개 중 5개 표시

• 높음CVE-2026-77180CVSS 점수 8.32026. 9. 2.

  When NGINX Ingress Controller is configured with Ingress annotations, an injection vulnerability exists in the configuration generator of NGINX Ingress Controller. Multiple user-controllable fields are written into the generated NGINX configuration without san

  CWE-76
• 높음CVE-2026-66362CVSS 점수 8.12026. 9. 2.

  Description: When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX configuration generator component of NGINX Gateway Fabric. User-supplied string values from the Authentication Filter Custom R

  CWE-76
• 높음CVE-2026-54722CVSS 점수 8.72026. 7. 30.

  DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks. Prior to 1.0.4, is_url_safe in src/helpers.ts strips the @ userinfo delimiter with remove_at_symbol_in_string before new URL parses the URL, allowing an attack

  CWE-76
• 높음CVE-2026-55723CVSS 점수 8.32026. 7. 15.

  When NGINX Ingress Controller is configured with Custom Resource Definitions (CRDs) or Ingress annotations, an injection vulnerability exists in the configuration generator of NGINX Ingress Controller. Multiple user-controllable fields are written into the gen

  CWE-76f5 nginx_ingress_controller
• 높음CVE-2026-11311CVSS 점수 8.12026. 6. 17.

  When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX configuration generator component of NGINX Gateway Fabric. User-supplied string values from the NginxProxy Custom Resource Definition serve

  CWE-76CWE-74f5 nginx_gateway_fabric