VYPR

apk package

chainguard/ingress-nginx-custom-error-pages-fips-1.15

pkg:apk/chainguard/ingress-nginx-custom-error-pages-fips-1.15

Vulnerabilities (23)

  • CVE-2026-32281HigApr 8, 2026
    affected < 1.15.6-r0fixed 1.15.6-r0

    Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise trusted certificate chains, issued by a root C

  • CVE-2026-32280HigApr 8, 2026
    affected < 1.15.6-r0fixed 1.15.6-r0

    During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls

  • CVE-2026-27140HigApr 8, 2026
    affected < 1.15.6-r0fixed 1.15.6-r0

    SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass.

Page 2 of 2