Is this project susceptible to cve-2025-1974

[Felix-Stakater]

The kubernetes nginx-ingress project just published patches for a critical vulnerability. Does this vulnerability exist in this codebase as well and what is the timeline for a fix?

[is-jonreeves]

My understanding is that the issue is limited to Kubernetes' nginx-ingress project, and is related to their Admission Controller functionality when an attacker has access to it.

• Original source: https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities

That said... I too would appreciate an official statement on this to be certain

[kyrofa]

This is my understanding as well. This project doesn't appear to have admission controllers, but I also don't quite have my head wrapped around what those are and how they work, so my confidence isn't as high as I would like.

[kyrofa]

I emailed F5, and they pointed me here. They say:

Our Product Engineering team has determined that NGINX Ingress Controller is not vulnerable to these issues.

[AlexFenlon]

Closing this as it has been answered, Thanks @kyrofa !