A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the custom snippets feature to obtain all secrets in the cluster.
Published October 29, 2021.
Kubernetes Ingress-nginx