ingress-nginx-opentelemetry-plugin-1.11

Direct Vulnerabilities

Known vulnerabilities in the ingress-nginx-opentelemetry-plugin-1.11 package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
L CVE-2026-42499	*
L CVE-2026-42501	*
H Double Free	*
L Improper Encoding or Escaping of Output	*
H Allocation of Resources Without Limits or Throttling	*
M Link Following	*
M Out-of-bounds Write	*
L Cross-site Scripting (XSS)	*
L CVE-2026-39825	*
H Loop with Unreachable Exit Condition ('Infinite Loop')	*
H NULL Pointer Dereference	*
L Allocation of Resources Without Limits or Throttling	*
C CVE-2026-27143	*
H Access of Resource Using Incompatible Type ('Type Confusion')	*
M Cross-site Scripting (XSS)	*
M Link Following	*
H Allocation of Resources Without Limits or Throttling	*
L CVE-2026-32280	*
M Allocation of Resources Without Limits or Throttling	*
H Improper Certificate Validation	*
H Incorrect Authorization	*
L Cross-site Scripting (XSS)	*
L Direct Request ('Forced Browsing')	*
L Directory Traversal	*
L CVE-2026-1580	*
L CVE-2026-24514	*
L CVE-2026-24512	*
L CVE-2026-24513	*
C CVE-2025-68121	<1.11.8-r9
L CVE-2025-61732	<1.11.8-r9
L Out-of-bounds Write	<1.11.8-r8
L Allocation of Resources Without Limits or Throttling	<1.11.8-r8
L CVE-2025-61731	<1.11.8-r8
L CVE-2025-61730	<1.11.8-r8
L Allocation of Resources Without Limits or Throttling	<1.11.8-r8
L Improper Certificate Validation	<1.11.8-r5
L Improper Certificate Validation	<1.11.8-r5
L CVE-2025-58186	<1.11.8-r3
L Allocation of Resources Without Limits or Throttling	<1.11.8-r3
L CVE-2025-61725	<1.11.8-r3
L Improper Certificate Validation	<1.11.8-r3
L Information Exposure Through Log Files	<1.11.8-r3
L Allocation of Resources Without Limits or Throttling	<1.11.8-r3
L CVE-2025-58183	<1.11.8-r3
L Allocation of Resources Without Limits or Throttling	<1.11.8-r3
L Algorithmic Complexity	<1.11.8-r3
L CVE-2025-47912	<1.11.8-r3
L CVE-2025-47906	<1.11.8-r1
L Race Condition	<1.11.8-r1

ingress-nginx-opentelemetry-plugin-1.11

Direct Vulnerabilities

Fix vulnerabilities automatically