tetragon

El nuevo componente Tetragon de Cilium permite una potente observabilidad de seguridad y aplicación en tiempo real basada en eBPF. Tetragon detecta y puede reaccionar ante eventos de seguridad significativos, como Eventos de ejecución de procesos Actividad de llamadas al sistema Actividad de E/S...

cilium

.. raw:: html |cii| |go-report| |clomonitor| |artifacthub| |slack| |go-doc| |rtd| |apache| |bsd| |gpl| |fossa| |gateway-api| |codespaces| Cilium is a networking, observability, and security solution with an eBPF-based dataplane. It provides a simple flat Layer 3 network with the ability to span...

cilium

.. raw:: html |cii| |go-report| |clomonitor| |artifacthub| |slack| |go-doc| |rtd| |apache| |bsd| |gpl| |fossa| |gateway-api| |codespaces| Cilium is a networking, observability, and security solution with an eBPF-based dataplane. It provides a simple flat Layer 3 network with the ability to span...

hardening-k8s-containers

Intentionally Vulnerable Note Taking Application This repository contains a very simple and vulnerable application used to demonstrate the differences between deploying this application with the default settings to a Kubernetes cluster, versus adding some extra security settings that WILL NOT fix...

CVE-2026-65819 vulnerabilities

Vulnerabilities for packages: calico-fips, cilium-fips, telegraf, calico, cilium...

CVE-2026-65819 vulnerabilities

Vulnerabilities for packages: cilium, calico, telegraf...

EUVD-2026-44774

Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock match...

GHSA-FM8W-2M5W-9J7R Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock match

Impact Standard Kubernetes NetworkPolicy specifications using CIDR-based ipBlock rules without pod or namespace selectors erroneously generate a wildcard namespace allow rule under specific cluster configurations. When Cilium deployment is configured with a specific custom clusterName rather than...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: netfilter: socket: Lookup orig tuple for IPv6 SNAT The nfsklookupslowv4 function performs the conntrack lookup for IPv4 packets in order to restore the original 5-tuple in case of SNAT, so that the correct socket if any can be...

GO-2026-6107 vulnerabilities

Vulnerabilities for packages: kine, multicluster-controlplane, kyverno, cert-manager, loki, kubernetes, cilium-cli, minio, hubble, dapr, commercial-grafana, multicluster-controlplane-fips, milvus, reports-server, kots, kube-conformance, rancher-support-bundle-kit, external-dns, cilium...

GO-2026-6121 vulnerabilities

Vulnerabilities for packages: cilium, calico-fips, cilium-fips, telegraf, calico, fq...

GO-2026-6122 vulnerabilities

Vulnerabilities for packages: cilium, calico-fips, cilium-fips, telegraf, calico, fq...

GO-2026-6238 vulnerabilities

Vulnerabilities for packages: hubble, docker, runc, nerdctl, kuma, falcoctl, gitaly, containerd, kubescape, kubescape-operator, splunk-otel-collector, vitess, witness, delve, k3s, hubble-ui...

GO-2026-6107 vulnerabilities

Vulnerabilities for packages: hubble, cilium, external-dns, cilium-cli, minio, cert-manager, kine, dapr, loki, kots, kubernetes, kyverno...

GO-2026-6122 vulnerabilities

Vulnerabilities for packages: cilium, calico, fq, telegraf...

GHSA-6VCH-Q96H-7GC3 vulnerabilities

Vulnerabilities for packages: hubble, cilium, external-dns, cilium-cli, minio, cert-manager, kine, dapr, loki, kots, kubernetes, kyverno...

CVE-2026-73500 vulnerabilities

Vulnerabilities for packages: hubble, cilium, external-dns, cilium-cli, minio, cert-manager, kine, dapr, loki, kots, kubernetes, kyverno...

GO-2026-6121 vulnerabilities

Vulnerabilities for packages: cilium, calico, fq, telegraf...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: cert-manager, kuma, kubernetes-csi-external-health-monitor, kubernetes-csi-external-provisioner, openfga, emissary, spicedb-operator, cilium, kyverno-notation-aws, pulumi-kubernetes-operator, cloud-provider-aws, cluster-api-aws-controller, descheduler,...

CVE-2026-73500 vulnerabilities

Vulnerabilities for packages: kine, multicluster-controlplane, kyverno, cert-manager, loki, kubernetes, cilium-cli, minio, hubble, dapr, commercial-grafana, multicluster-controlplane-fips, milvus, reports-server, kots, kube-conformance, rancher-support-bundle-kit, external-dns, cilium...