registry.k8s.io/ingress-nginx/controller:v1.12.0 container image
Kubernetes registryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.all tags of registry.k8s.io/ingress-nginx/controller
registry.k8s.io/ingress-nginx/controller:v1.12.0 resolved to e6b8de175acd, scanned 14 Sept 2026: 125 findings, 0 critical; deployed by 1 chart, among them direktiv.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
125 distinct on this digest
Findings for digest e6b8de175acd as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| High | ALPINE-CVE-2025-15467 | openssl | 3.3.6-r0 |
| Medium | ALPINE-CVE-2025-49796 | libxml2 | 2.13.9-r0 |
| Medium | ALPINE-CVE-2024-56171 | libxml2 | 2.13.4-r4 |
| Medium | ALPINE-CVE-2025-9230 | openssl | 3.3.5-r0 |
| Medium | ALPINE-CVE-2024-12797 | openssl | 3.3.3-r0 |
| Medium | ALPINE-CVE-2025-9231 | openssl | 3.3.5-r0 |
| Medium | ALPINE-CVE-2025-49794 | libxml2 | 2.13.9-r0 |
| Medium | ALPINE-CVE-2025-6021 | libxml2 | 2.13.9-r0 |
| Medium | ALPINE-CVE-2025-0725 | curl | 8.12.0-r0 |
| Medium | ALPINE-CVE-2025-0665 | curl | 8.12.0-r0 |
| Medium | ALPINE-CVE-2025-27113 | libxml2 | 2.13.4-r5 |
| Medium | ALPINE-CVE-2026-31790 | openssl | 3.3.7-r0 |
| Medium | ALPINE-CVE-2025-31115 | xz | 5.6.3-r1 |
| Medium | ALPINE-CVE-2025-9232 | openssl | 3.3.5-r0 |
| Medium | ALPINE-CVE-2026-28388 | openssl | 3.3.7-r0 |
| Medium | ALPINE-CVE-2025-69421 | openssl | 3.3.6-r0 |
| Medium | GHSA-6v2p-p543-phr9 | golang.org/ | 0.27.0 |
| Medium | ALPINE-CVE-2026-28387 | openssl | 3.3.7-r0 |
| Medium | ALPINE-CVE-2026-28389 | openssl | 3.3.7-r0 |
| Medium | ALPINE-CVE-2026-28390 | openssl | 3.3.7-r0 |
| Low | ALPINE-CVE-2025-69420 | openssl | 3.3.6-r0 |
| Low | ALPINE-CVE-2025-31498 | c-ares | 1.34.5-r0 |
| Low | GHSA-9493-h29p-rfm2 | github.com/ | 1.2.8 |
| Low | ALPINE-CVE-2026-27135 | nghttp2 | 1.68.1 |
| Low | ALPINE-CVE-2026-6732 | libxml2 | 2.13.9-r1 |
| Low | ALPINE-CVE-2025-49795 | libxml2 | 2.13.9-r0 |
| Low | ALPINE-CVE-2026-31789 | openssl | 3.3.7-r0 |
| Low | ALPINE-CVE-2025-69419 | openssl | 3.3.6-r0 |
| Low | GHSA-qw9x-cqr3-wc7r | github.com/ | 1.2.8 |
| Low | GHSA-cgrx-mc8f-2prm | github.com/ | 1.2.8 |
| Low | ALPINE-CVE-2026-22184 | zlib | 1.3.2-r0 |
| Low | ALPINE-CVE-2026-33630 | c-ares | 1.34.8-r0 |
| Low | ALPINE-CVE-2025-24928 | libxml2 | 2.13.4-r4 |
| Low | ALPINE-CVE-2025-15468 | openssl | 3.3.6-r0 |
| Low | ALPINE-CVE-2025-5222 | icu | 74.2-r1 |
| Low | GO-2026-4341 | stdlib | 1.24.12 |
| Low | ALPINE-CVE-2025-26519 | musl | 1.2.5-r9 |
| Low | GHSA-5cv4-jp36-h3mw | golang.org/ | 0.55.0 |
| Low | ALPINE-CVE-2026-40200 | musl | 1.2.5-r11 |
| Low | ALPINE-CVE-2025-62408 | c-ares | 1.34.6-r0 |
| Low | ALPINE-CVE-2025-66199 | openssl | 3.3.6-r0 |
| Low | GHSA-vvgc-356p-c3xw | golang.org/ | 0.38.0 |
| Low | ALPINE-CVE-2025-4947 | curl | 8.14.0-r0 |
| Low | ALPINE-CVE-2026-22796 | openssl | 3.3.6-r0 |
| Low | ALPINE-CVE-2025-10148 | curl | 8.14.1-r2 |
| Low | ALPINE-CVE-2026-34743 | xz | 5.8.3-r0 |
| Low | GO-2026-4981 | stdlib | 1.25.10 |
| Low | GO-2025-3563 | stdlib | 1.23.8 |
| Low | GO-2026-4977 | stdlib | 1.25.10 |
| Low | GO-2026-4986 | stdlib | 1.25.10 |