CVE-2021-23055: F5 Nginx Ingress Controller

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

On version 2.x before 2.0.3 and 1.x before 1.12.3, the command line restriction that controls snippet use with NGINX Ingress Controller does not apply to Ingress objects. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products

• F5 Nginx Ingress Controller: from 1.0.0, before 1.12.3 (fixed in 1.12.3); from 2.0.0, before 2.0.3 (fixed in 2.0.3)

Published 2022-04-21. Last modified 2026-06-17.