225 matches found
GO-2026-6122 vulnerabilities
Vulnerabilities for packages: telegraf, fq, cilium, cilium-fips, calico-fips, calico...
GO-2026-6121 vulnerabilities
Vulnerabilities for packages: telegraf, fq, cilium, cilium-fips, calico-fips, calico...
GO-2026-6122 vulnerabilities
Vulnerabilities for packages: telegraf, calico, cilium, fq...
GO-2026-6121 vulnerabilities
Vulnerabilities for packages: telegraf, calico, cilium, fq...
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: kyverno, kapp-controller, gatekeeper, cluster-api-azure-controller, vcluster, k8ssandra-client, kyverno-notation-aws, kube-vip-cloud-provider, kubernetes-csi-external-provisioner, cilium, kubescape-operator, flux-notification-controller, kwok, openbao,...
GO-2025-4222 vulnerabilities
Vulnerabilities for packages: flannel, rootlesskit, buildah, nerdctl, rootlesskit-fips, istio-fips, docker, calico-fips, calico, istio, docker-fips, multus-cni-fips, kuma, k3s, amazon-k8s-cni-fips, buildkitd, rke2-runtime, flannel-fips, containerd, azure-ipam, containerd-fips, buildkitd-fips,...
GO-2025-4222 vulnerabilities
Vulnerabilities for packages: istio, multus-cni, azure-ipam, podman, buildkitd, rootlesskit, flannel, k3s, nerdctl, buildah, kuma, docker, containerd, calico, datadog-agent...
Photon OS 5.0: Calico PHSA-2023-5.0-91-0037
An update of the calico package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0037. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Calico PHSA-2023-5.0-91-0049
An update of the calico package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0049. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2026-41186 vulnerabilities
Vulnerabilities for packages: calico-fips...
GHSA-38W4-QXG9-XG36 vulnerabilities
Vulnerabilities for packages: calico-fips...
CVE-2026-41187 vulnerabilities
Vulnerabilities for packages: calico-fips...
GHSA-H3H4-J2QV-PV4J vulnerabilities
Vulnerabilities for packages: calico-fips...
GHSA-GM75-WG2C-P77X vulnerabilities
Vulnerabilities for packages: calico-fips...
CVE-2026-6540 vulnerabilities
Vulnerabilities for packages: calico-fips...
CVE-2026-6540
Calico's Application Layer Policy disabled by default, which enforces HTTP rules through Dikastes, fails to perform URL path normalization. As a result, HTTP requests using path-traversal segments, encoded slashes, or repeated slashes are not correctly evaluated by Prefix path rules. Dikastes...
CVE-2026-41186
When Calico's shared debug server is enabled disabled by default, the Calico kube-controllers and Goldmane components bind their Go pprof debug listener to 0.0.0.0 without authentication. Any pod with network reachability to the listener can retrieve the process heap, goroutine stacks including...
CVE-2026-41186 Unauthenticated Go pprof exposure in Calico debug server
When Calico's shared debug server is enabled disabled by default, the Calico kube-controllers and Goldmane components bind their Go pprof debug listener to 0.0.0.0 without authentication. Any pod with network reachability to the listener can retrieve the process heap, goroutine stacks including...
CVE-2026-41187
Summary: Calico’s apiserver fails to invoke the Delete override for DeleteCollection on tier-scoped policies (NetworkPolicy, GlobalNetworkPolicy and staged variants). This allows a user with deletecollection or wildcard verbs on tier-scoped policy resources to bulk-delete policies in tiers they w...
CVE-2026-6540 L7 policy bypass via unnormalized HTTP path matching
Calico's Application Layer Policy disabled by default, which enforces HTTP rules through Dikastes, fails to perform URL path normalization. As a result, HTTP requests using path-traversal segments, encoded slashes, or repeated slashes are not correctly evaluated by Prefix path rules. Dikastes...