1064 matches found
cilium
.. raw:: html |cii| |go-report| |clomonitor| |artifacthub| |slack| |go-doc| |rtd| |apache| |bsd| |gpl| |fossa| |gateway-api| |codespaces| Cilium is a networking, observability, and security solution with an eBPF-based dataplane. It provides a simple flat Layer 3 network with the ability to span...
cilium
.. raw:: html |cii| |go-report| |clomonitor| |artifacthub| |slack| |go-doc| |rtd| |apache| |bsd| |gpl| |fossa| |gateway-api| |codespaces| Cilium es una solución de red, observabilidad y seguridad con un plano de datos basado en eBPF. Proporciona una red plana simple de Capa 3 con la capacidad de...
tetragon
El nuevo componente Tetragon de Cilium permite una potente observabilidad de seguridad y aplicación en tiempo real basada en eBPF. Tetragon detecta y puede reaccionar ante eventos de seguridad significativos, como Eventos de ejecución de procesos Actividad de llamadas al sistema Actividad de E/S...
hardening-k8s-containers
Aplicación de toma de notas intencionalmente vulnerable Este repositorio contiene una aplicación muy simple y vulnerable utilizada para demostrar las diferencias entre desplegar esta aplicación con la configuración predeterminada en un clúster de Kubernetes, frente a agregar algunas configuracion...
GO-2026-6505 vulnerabilities
Vulnerabilities for packages: cloud-provider-azure, cloudflared, cluster-api-ipam-provider-in-cluster, istio, kubernetes-csi-driver-nfs, kubescape, wal-g, grype, docker, thanos, argocd-image-updater, distribution, cortex, terraform-provider-grafana, net-kourier, prometheus-operator,...
GO-2026-6596 Cilium: Namespaced HTTPRoutes can redirect traffic to other namespaces in github.com/cilium/cilium
Cilium: Namespaced HTTPRoutes can redirect traffic to other namespaces in github.com/cilium/cilium...
PT-2026-105612
Cilium: Namespaced HTTPRoutes can redirect traffic to other namespaces in github.com/cilium/cilium. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from...
CLEANSTART-2026-CI21288 vulnerability has been found in cilium ebpf up to 0
Security vulnerability affects the grafana-alloy package. A vulnerability has been found in cilium ebpf up to 0...
EUVD-2026-44773
Cilium: Namespaced HTTPRoutes can redirect traffic to other namespaces...
GHSA-W7C2-W76W-5HMJ Cilium: Namespaced HTTPRoutes can redirect traffic to other namespaces
Impact In Cilium clusters using Gateway API, users with permissions to create or update namespaced HTTPRoutes can mirror HTTP traffic to any Service in any namespace, bypassing the ReferenceGrant authorization mechanism. Gateway API functionality is disabled by default. Patches This issue affects...
Cilium: Namespaced HTTPRoutes can redirect traffic to other namespaces
Impact In Cilium clusters using Gateway API, users with permissions to create or update namespaced HTTPRoutes can mirror HTTP traffic to any Service in any namespace, bypassing the ReferenceGrant authorization mechanism. Gateway API functionality is disabled by default. Patches This issue affects...
SUSE CVE-2026-56743
Cilium is a networking, observability, and security solution. From 1.19.0 to 1.19.4, standard Kubernetes NetworkPolicy specifications using CIDR-based ipBlock rules without pod or namespace selectors erroneously generate a wildcard namespace allow rule when Cilium is configured with a custom...
cilium v1.20.2
.. raw:: html |cii| |go-report| |clomonitor| |artifacthub| |slack| |go-doc| |rtd| |apache| |bsd| |gpl| |fossa| |gateway-api| |codespaces| Cilium is a networking, observability, and security solution with an eBPF-based dataplane. It provides a simple flat Layer 3 network with the ability to span...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: bpf: Scrubbing packets on bpfredirectpeer When bpfredirectpeer is used to redirect packets to a device in another network namespace, the packets are not scrubbed. This can lead to information about the packets being “misused” in...
Amazon Linux 2 : nerdctl (ALAS-2026-3903)
The version of nerdctl installed on the remote host is prior to 2.3.5-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3903 advisory. A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go o...
Medium: nerdctl
Issue Overview: A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such manipulation of the argument offset leads to integer overflow. The attack can only be...
GO-2026-6367 vulnerabilities
Vulnerabilities for packages: cilium, kubescape...
GO-2026-6367 Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock match in github.com/cilium/cilium
Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock match in github.com/cilium/cilium...
