CyberSecBulletin

Projectcontour vulnerabilities

We track 1 vulnerability in Projectcontour products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 23, 2026.

1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score

Latest Projectcontour vulnerabilities

  • 8.1 High severity

    contour: Improper Control of Generation of Code

    CVE-2026-41246Projectcontour

    Contour is a Kubernetes ingress controller using Envoy proxy. From v1.19.0 to before v1.33.4, v1.32.5, and v1.31.6, Contour's Cookie Rewriting feature is vulnerable to Lua code injection. An attacker with RBAC permissions to create or modify HTTPProxy resource