https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-4342.htmlhttps://patchthecve.com/cve/CVE-2026-4342.htmlWed, 17 Jun 2026 10:56:26 +0000HIGH 8.8: A security issue was discovered in ingress-nginx where a combination of Ingress annotations can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in https://patchthecve.com/cve/CVE-2026-3288.htmlhttps://patchthecve.com/cve/CVE-2026-3288.htmlWed, 17 Jun 2026 10:43:21 +0000HIGH 8.8: A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/rewrite-target` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible tohttps://patchthecve.com/cve/CVE-2024-5154.htmlhttps://patchthecve.com/cve/CVE-2024-5154.htmlFri, 21 Aug 2026 12:16:17 +0000HIGH 8.1: A flaw was found in cri-o. A malicious container can create a symbolic link to arbitrary files on the host via directory traversal (“../“). This flaw allows the container to read and write to arbitrary files on the host system.