Security
فارسی
All products

github.com/cilium/cilium

Go · Package
39 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Cilium: Namespaced HTTPRoutes can redirect traffic to other namespacesCVE-2026-56742 · GHSA-W7C2-W76W-5HMJVersion ranges need review. github.com/cilium/ciliumgithub.com/cilium/ciliumCilium Go Medium Fix reported
Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock matchCVE-2026-56743 · GHSA-FM8W-2M5W-9J7RVersion ranges need review. github.com/cilium/cilium Go Medium Fix reported
Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labelsGHSA-PFHR-PCCP-HWMH · GO-2022-0959Version ranges need review. github.com/cilium/cilium Go Medium Fix reported
Cilium host policy bypass in endpoint-routes mode with dual-stackGHSA-WC5V-R48V-G4VH github.com/cilium/cilium Go Low Fix reported
Cilium vulnerable to sensitive information disclosure and cluster disruption via local Envoy admin socket accessCVE-2026-49445 · GHSA-3FCV-JVFP-M4Q9Version ranges need review. github.com/cilium/cilium Go Critical Fix reported
CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translationCVE-2026-53935 · GHSA-Q6H5-Q3Q6-F87XVersion ranges need review. github.com/cilium/cilium Go Medium Fix reported
Cilium with misconfigured toGroups in policies can lead to unrestricted egress trafficCVE-2025-64715 · GHSA-38PP-6GCP-RQVMVersion ranges need review. github.com/cilium/cilium Go Medium Fix reported
Cilium node based network policies may incorrectly allow workload trafficCVE-2025-30163 · GHSA-C6PF-2V8J-96MCVersion ranges need review. github.com/cilium/ciliumNetwork Observability Operator/network-observability/network-observability-ebpf-agent-rhel9 GoRed Hat Low Fix reported
Cillium exposes sensitive information included in the cilium-bugtool debug archiveCVE-2026-41520 · GHSA-GJ49-89WH-H4GJVersion ranges need review. github.com/cilium/cilium Go High Fix reported
Cilium L7 proxy may bypass Kubernetes NetworkPolicy for same-node trafficCVE-2026-33726 · GHSA-HXV8-4J4R-CQGVVersion ranges need review. github.com/cilium/cilium Go Medium Fix reported
Unencrypted ingress/health traffic when using Wireguard transparent encryptionCVE-2024-25630 · GHSA-7496-FGV9-XW82Version ranges need review. github.com/cilium/cilium Go Medium Fix reported
Unencrypted traffic between pods when using Wireguard and an external kvstoreCVE-2024-25631 · GHSA-X989-52FC-4VR4Version ranges need review. github.com/cilium/cilium Go Medium Fix reported
Cilium eBPF filters may be temporarily removed during agent restartCVE-2023-27595 · GHSA-R5X6-W42P-JHPPVersion ranges need review. github.com/cilium/cilium Go Medium Fix reported
Network policy may be bypassed by some ICMP Echo RequestsGHSA-C66W-HQ56-4Q97 · GO-2022-0393Version ranges need review. github.com/cilium/cilium Go Low Fix reported
Cilium may not enforce host firewall policies when Native Routing, WireGuard and Node Encryption are enabledCVE-2026-26963 · GHSA-5R23-PRX4-MQG3Version ranges need review. github.com/cilium/cilium Go Medium Fix reported
Unencrypted traffic between nodes when using WireGuard and L7 policiesCVE-2024-28250 · GHSA-V6Q2-4QR3-5CW6Version ranges need review. github.com/cilium/cilium Go Medium Fix reported
Cilium East-west traffic not subject to egress policy enforcement for requests via Gateway API load balancersCVE-2025-30162 · GHSA-24QP-4XX8-3JVJVersion ranges need review. github.com/cilium/ciliumNetwork Observability Operator/network-observability/network-observability-ebpf-agent-rhel9 GoRed Hat Low Fix reported
Kubernetes users may update Pod labels to bypass network policyCVE-2023-39347 · GHSA-GJ2R-PHWG-6RWWVersion ranges need review. github.com/cilium/cilium Go Medium Fix reported
Cilium's Layer 7 policy enforcement may not occur in policies with wildcarded port rangesCVE-2024-52529 · GHSA-XG58-75QF-9R67Version ranges need review. github.com/cilium/cilium Go Medium Fix reported
Potential network policy bypass when routing IPv6 traffic CVE-2023-27594 · GHSA-8FG8-JH2H-F2HCVersion ranges need review. github.com/cilium/cilium Go Medium Fix reported