tetragon

Le nouveau composant Tetragon de Cilium permet une observabilité de sécurité puissante en temps réel et une mise en application à l'exécution, basées sur eBPF. Tetragon détecte et peut réagir à des événements importants pour la sécurité, tels que Événements d'exécution de processus Appels système...

cilium

.. raw:: html |cii| |go-report| |clomonitor| |artifacthub| |slack| |go-doc| |rtd| |apache| |bsd| |gpl| |fossa| |gateway-api| |codespaces| Cilium is a networking, observability, and security solution with an eBPF-based dataplane. It provides a simple flat Layer 3 network with the ability to span...

cilium

.. raw:: html |cii| |go-report| |clomonitor| |artifacthub| |slack| |go-doc| |rtd| |apache| |bsd| |gpl| |fossa| |gateway-api| |codespaces| Cilium — это решение для сетевого взаимодействия, наблюдаемости и безопасности с плоскостью данных на основе eBPF. Оно обеспечивает простую плоскую сеть уровня...

hardening-k8s-containers

Application de prise de notes intentionnellement vulnérable Ce dépôt contient une application très simple et vulnérable utilisée pour démontrer les différences entre déployer cette application avec les paramètres par défaut dans un cluster Kubernetes, et ajouter quelques paramètres de sécurité...

GO-2026-6505 vulnerabilities

Vulnerabilities for packages: hydra, argo-events, litestream, dbmate, istio, percona-server-mongodb-operator, zot, loki, aactl, descheduler, amazon-cloudwatch-agent-operator, apisix-ingress-controller, crossplane-provider-sql, cosign, kapp, consul-k8s, cloud-provider-aws, tailscale, dagger, flux,...

CLEANSTART-2026-CI21288 vulnerability has been found in cilium ebpf up to 0

Security vulnerability affects the grafana-alloy package. A vulnerability has been found in cilium ebpf up to 0...

EUVD-2026-44773

Cilium: Namespaced HTTPRoutes can redirect traffic to other namespaces...

GHSA-W7C2-W76W-5HMJ Cilium: Namespaced HTTPRoutes can redirect traffic to other namespaces

Impact In Cilium clusters using Gateway API, users with permissions to create or update namespaced HTTPRoutes can mirror HTTP traffic to any Service in any namespace, bypassing the ReferenceGrant authorization mechanism. Gateway API functionality is disabled by default. Patches This issue affects...

Cilium: Namespaced HTTPRoutes can redirect traffic to other namespaces

Impact In Cilium clusters using Gateway API, users with permissions to create or update namespaced HTTPRoutes can mirror HTTP traffic to any Service in any namespace, bypassing the ReferenceGrant authorization mechanism. Gateway API functionality is disabled by default. Patches This issue affects...

SUSE CVE-2026-56743

Cilium is a networking, observability, and security solution. From 1.19.0 to 1.19.4, standard Kubernetes NetworkPolicy specifications using CIDR-based ipBlock rules without pod or namespace selectors erroneously generate a wildcard namespace allow rule when Cilium is configured with a custom...

cilium v1.20.2

.. raw:: html |cii| |go-report| |clomonitor| |artifacthub| |slack| |go-doc| |rtd| |apache| |bsd| |gpl| |fossa| |gateway-api| |codespaces| Cilium is a networking, observability, and security solution with an eBPF-based dataplane. It provides a simple flat Layer 3 network with the ability to span...

Medium: nerdctl

Issue Overview: A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such manipulation of the argument offset leads to integer overflow. The attack can only be...

Amazon Linux 2 : nerdctl (ALAS-2026-3903)

The version of nerdctl installed on the remote host is prior to 2.3.5-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3903 advisory. A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go o...

GO-2026-6367 vulnerabilities

Vulnerabilities for packages: kubescape, cilium...

GO-2026-6367 Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock match in github.com/cilium/cilium

Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock match in github.com/cilium/cilium...

CVE-2026-65819 vulnerabilities

Vulnerabilities for packages: cilium, calico-fips, telegraf, cilium-fips, calico...

CVE-2026-65819 vulnerabilities

Vulnerabilities for packages: telegraf, cilium, calico...

EUVD-2026-44774

Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock match...

Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock match

Impact Standard Kubernetes NetworkPolicy specifications using CIDR-based ipBlock rules without pod or namespace selectors erroneously generate a wildcard namespace allow rule under specific cluster configurations. When Cilium deployment is configured with a specific custom clusterName rather than...

GHSA-FM8W-2M5W-9J7R Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock match

Impact Standard Kubernetes NetworkPolicy specifications using CIDR-based ipBlock rules without pod or namespace selectors erroneously generate a wildcard namespace allow rule under specific cluster configurations. When Cilium deployment is configured with a specific custom clusterName rather than...