{"action":"Upgrade k8s.io/ingress-nginx to 1.5 or later.","affected":[{"fixed":"1.5","introduced":"0"}],"component":"k8s.io/ingress-nginx","cve_ids":["CVE-2018-1002104"],"ecosystem":"Go","epss":0.01138,"exploited":false,"fixed_versions":["1.5"],"ghsa_id":"GHSA-p3x5-5xpx-9phm","id":"tcs_01M5KFGT1ZCPGXP6C34PMAMG5D","modified_at":"2026-09-10T03:49:35.342076065Z","published_at":"2022-05-24T17:06:10Z","references":["https://osv.dev/vulnerability/GHSA-p3x5-5xpx-9phm","https://nvd.nist.gov/vuln/detail/CVE-2018-1002104","https://github.com/kubernetes/ingress-nginx/issues/1733","https://github.com/kubernetes/ingress-nginx/pull/3125","https://github.com/kubernetes/ingress-nginx/commit/d487a50e399100ad8db12ed1d2f92271f311f676","https://github.com/kubernetes/ingress-nginx"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-p3x5-5xpx-9phm","url":"https://osv.dev/vulnerability/GHSA-p3x5-5xpx-9phm"}],"summary":"Kubernetes ingress exposes sensitive information"}