292 matches found
CVE-2025-30162 vulnerabilities
Vulnerabilities for packages: hubble, hubble-ui...
GHSA-24QP-4XX8-3JVJ vulnerabilities
Vulnerabilities for packages: hubble, hubble-ui...
CVE-2025-30162 vulnerabilities
Vulnerabilities for packages: hubble-ui, hubble, hubble-fips...
GHSA-24QP-4XX8-3JVJ vulnerabilities
Vulnerabilities for packages: hubble-ui, hubble, hubble-fips...
CVE-2024-27347
Server-Side Request Forgery SSRF vulnerability in Apache HugeGraph-Hubble.This issue affects Apache HugeGraph-Hubble: from 1.0.0 before 1.3.0. Users are recommended to upgrade to version 1.3.0, which fixes the issue...
SUSE CVE-2025-23047
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An insecure default Access-Control-Allow-Origin header value could lead to sensitive data exposure for users of Cilium versions 1.14.0 through 1.14.7, 1.15.0 through 1.15.11, and 1.16.0 through 1.16.4 who...
Sensitive Data Exposure
github.com/cilium/cilium is vulnerable to Sensitive Data Exposure. The vulnerability is due to improper default configuration of the Access-Control-Allow-Origin header, which allows cross-origin requests from untrusted sources, potentially exposing sensitive information when accessing the Hubble ...
GO-2025-3416 Cilium has an information leakage via insecure default Hubble UI CORS header in github.com/cilium/cilium
Cilium has an information leakage via insecure default Hubble UI CORS header in github.com/cilium/cilium...
BIT-HUBBLE-RELAY-2025-23047 Cilium vulnerable to information leakage via insecure default Hubble UI CORS header
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An insecure default Access-Control-Allow-Origin header value could lead to sensitive data exposure for users of Cilium versions 1.14.0 through 1.14.7, 1.15.0 through 1.15.11, and 1.16.0 through 1.16.4 who...
BIT-CILIUM-OPERATOR-2025-23047 Cilium vulnerable to information leakage via insecure default Hubble UI CORS header
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An insecure default Access-Control-Allow-Origin header value could lead to sensitive data exposure for users of Cilium versions 1.14.0 through 1.14.7, 1.15.0 through 1.15.11, and 1.16.0 through 1.16.4 who...
BIT-CILIUM-2025-23047 Cilium vulnerable to information leakage via insecure default Hubble UI CORS header
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An insecure default Access-Control-Allow-Origin header value could lead to sensitive data exposure for users of Cilium versions 1.14.0 through 1.14.7, 1.15.0 through 1.15.11, and 1.16.0 through 1.16.4 who...
CVE-2025-23047
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An insecure default Access-Control-Allow-Origin header value could lead to sensitive data exposure for users of Cilium versions 1.14.0 through 1.14.7, 1.15.0 through 1.15.11, and 1.16.0 through 1.16.4 who...
CVE-2025-23047 vulnerabilities
Vulnerabilities for packages: hubble-fips, hubble-ui, hubble-ui-backend-fips, hubble, cilium, cilium-fips...
CVE-2025-23047 vulnerabilities
Vulnerabilities for packages: hubble, hubble-ui...
GHSA-H78M-J95M-5356 vulnerabilities
Vulnerabilities for packages: hubble-fips, hubble-ui, hubble-ui-backend-fips, hubble, cilium, cilium-fips...
GHSA-H78M-J95M-5356 Cilium has an information leakage via insecure default Hubble UI CORS header
Impact For users who deploy Hubble UI using either Cilium CLI or via the Cilium Helm chart, an insecure default Access-Control-Allow-Origin header value could lead to sensitive data exposure. A user with access to a Hubble UI instance affected by this issue could leak configuration details about...
GHSA-H78M-J95M-5356 vulnerabilities
Vulnerabilities for packages: hubble, hubble-ui...
Cilium has an information leakage via insecure default Hubble UI CORS header
Impact For users who deploy Hubble UI using either Cilium CLI or via the Cilium Helm chart, an insecure default Access-Control-Allow-Origin header value could lead to sensitive data exposure. A user with access to a Hubble UI instance affected by this issue could leak configuration details about...