Kubernetes Ingress Controller (Haproxy) - vulnerabilities (CVEs)

1 CVEs, 1 in the last 30 days, 9 known versions, newest CVE from 2026-10-22. Vendor: Haproxy.

CVEs of Kubernetes Ingress Controller

• CVE-2026-110353 - CVSS 7.5 (high), 2026-10-22: HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (worker-thread CPU exhaustion) via a truncated HTTP/2 PING…
• CVE-2025-11230 - CVSS 7.5 (high), 2025-11-19: Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests.