BIT-HUBBLE-RELAY-2025-64715 Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.16.17, 1.17.10, and 1.18.4, CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network...

BIT-CILIUM-2025-64715 Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.16.17, 1.17.10, and 1.18.4, CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network...

GHSA-G7RM-8PW5-WVG2 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-gcp, linux-azure...

GHSA-38PP-6GCP-RQVM Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic

Impact CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network interface may unintentionally allow broader outbound access than intended by the policy authors. In such cases, the toCIDRset sectio...

Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic

Impact CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network interface may unintentionally allow broader outbound access than intended by the policy authors. In such cases, the toCIDRset sectio...

Malicious code in markdownlint-cli2-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 655d6053e439a95c848bd57cd41cba21de94f230903346b885b527082e131915 The package markdownlint-cli2-action was found to contain malicious code...

Malicious code in angular-promql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b34c3150aabe5f7147486dac3ab4fd22d906f4ec0d8f4f7d39b1c9f2137ebaaf The package angular-promql was found to contain malicious code...

Malicious code in mongodb-atlas-cli-toc-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b43eaf31369a3ecfac60651fb3c08bc314680fd9b476179d902bbfee64b0d62 The package mongodb-atlas-cli-toc-generator was found to contain malicious code...

Malicious code in privy-farcaster-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87c7eee6179f85bcc2beaf0d3637f35c0a626b6db6222c86af862a01e01645e1 The package privy-farcaster-demo was found to contain malicious code...

Malicious code in privy-frames-v2-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50804c5abc715a96e6683f67c970ed8e06d949cce42d57ac7d8754c9633ad685 The package privy-frames-v2-demo was found to contain malicious code...

Malicious code in render-stage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c65b8147f7b040c89bba386febb3dbbfe85d6f5e9c14fa261e67de9bc558587 The package render-stage was found to contain malicious code...

Malicious code in ripiocoin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46d214e1d19924150f99adab3db3d459c88096cdcfd158d4dd41daefd936b4a3 The package ripiocoin was found to contain malicious code...

Malicious code in tilt-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f82989e88831785c95c219b66edb876aed00a77b53cedc1b81e595e395222aa5 The package tilt-ui was found to contain malicious code...

Malicious code in kubebuilder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 456a881366168d4fa499da92a8d4a0ea76d3ebea8279b0db3a27ce5b1a7d2d47 The package kubebuilder was found to contain malicious code...

Malicious code in hpi-porsche-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89589737b4001caa57e131f557999bed39bd5bdc13de932d5988f194508cfc7b The package hpi-porsche-app was found to contain malicious code...

Malicious code in iife-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8e97bde46b5ac29b3ccdf1ff9f4776714cf09769cf0e5fd360ea8e3d0fe6f1d The package iife-sample was found to contain malicious code...

MAL-2025-191505 Malicious code in angular-promql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b34c3150aabe5f7147486dac3ab4fd22d906f4ec0d8f4f7d39b1c9f2137ebaaf The package angular-promql was found to contain malicious code...

MAL-2025-191525 Malicious code in ripiocoin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46d214e1d19924150f99adab3db3d459c88096cdcfd158d4dd41daefd936b4a3 The package ripiocoin was found to contain malicious code...

MAL-2025-191523 Malicious code in privy-frames-v2-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50804c5abc715a96e6683f67c970ed8e06d949cce42d57ac7d8754c9633ad685 The package privy-frames-v2-demo was found to contain malicious code...

MAL-2025-191515 Malicious code in leafygreen-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59f7fae370136d1686b52bfce441170148b5370d9bc737f0426895d826f2933e The package leafygreen-docs was found to contain malicious code...