projectcontour

Records6All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

projectcontour records in CISA KEV

TI-2023-23979 HTTP/2 Rapid Reset Attack Vulnerability CRITICAL 90KEV 2023-10-10

Components

Products in the NVD configurations · select one to filter the records

Contour 5 records CRITICAL

Records

5 records in Contour · all components

TI-2023-23979 CVE-2023-44487 · GHSA-qppj-fm5r-hxr3

The HTTP/2 protocol allows a denial of service (server resource consumption) because…

CRITICAL 90KEV

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.99999 Published 2023-10-10 Partial fix · 1.28.0, 0.17.0 +9 CWE-400

TI-2024-24308 CVE-2024-36539 · GHSA-6xhf-2fjj-wq6j

Insecure permissions in contour v1.28.3 allows attackers to access sensitive data and…

HIGH 82

Insecure permissions in contour v1.28.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01263 Published 2024-07-24 No fix listed CWE-277

TI-2021-12450 CVE-2021-32783 · GHSA-5ph6-qq5x-7jwc

Authorization bypass in Contour

LOW 39

Contour is a Kubernetes ingress controller using Envoy proxy.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.01151 Published 2021-07-23 Fixed in 1.17.1, 1.14.2 +2 CWE-441

TI-2026-29855 CVE-2026-41246 · GHSA-x4mj-7f9g-29h4

Contour: Lua code injection via Cookie Path Rewrite Policy

LOW 36

Contour is a Kubernetes ingress controller using Envoy proxy.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00492 Published 2026-04-23 Fixed in 1.33.4, 1.32.5 +1 CWE-94

TI-2020-11900 CVE-2020-15127

Denial of service in Contour

LOW 36

In Contour ( Ingress controller for Kubernetes) before version 1.7.0, a bad actor can shut down all instances of Envoy, essentially killing the entire ingress data plane.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01375 Published 2020-08-05 Fixed in 1.7.0 CWE-306

Open these records in search →

Critical	1
High	4
Medium	1
Low	0
No CVSS	0