Kubernetes Ingress Controller vulnerabilities

1 known vulnerability in Kubernetes Ingress Controller from Haproxy. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  HAProxy: Unchecked Return Value

  CVE-2026-110353Oct 22, 2026Haproxy

  HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (worker-thread CPU exhaustion) via a truncated HTTP/2 PING frame. h2c_handle_ping in src/mux_h2.c does not check for a short read, unlike the other H2 frame handlers