EUVD-2022-2834

Malicious code in bioql PyPI...

EUVD-2022-3809

Malicious code in bioql PyPI...

GO-2025-3416 Cilium has an information leakage via insecure default Hubble UI CORS header in github.com/cilium/cilium

Cilium has an information leakage via insecure default Hubble UI CORS header in github.com/cilium/cilium...

CVE-2025-23047 Cilium vulnerable to information leakage via insecure default Hubble UI CORS header

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An insecure default Access-Control-Allow-Origin header value could lead to sensitive data exposure for users of Cilium versions 1.14.0 through 1.14.7, 1.15.0 through 1.15.11, and 1.16.0 through 1.16.4 who...

CVE-2024-47825 vulnerabilities

Vulnerabilities for packages: hubble-ui, hubble-ui-backend-fips, cilium, cilium-fips...

GHSA-3WWX-63FV-PFQ6 vulnerabilities

Vulnerabilities for packages: hubble-ui, hubble-ui-backend-fips, cilium, cilium-fips...

GHSA-Q7W8-72MR-VPGW vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, cilium, cilium-fips, hubble-ui, hubble...

GO-2024-2569 Unencrypted traffic between pods when using Wireguard and an external kvstore in github.com/cilium/cilium

Unencrypted traffic between pods when using Wireguard and an external kvstore in github.com/cilium/cilium...

GO-2024-2568 Unencrypted ingress/health traffic when using Wireguard transparent encryption in github.com/cilium/cilium

Unencrypted ingress/health traffic when using Wireguard transparent encryption in github.com/cilium/cilium...

PT-2023-21234 · Cilium · Cilium

Name of the Vulnerable Software and Affected Versions: Cilium versions prior to 1.11.15 Cilium versions prior to 1.12.8 Cilium versions prior to 1.13.1 Description: Cilium may misattribute the source IP address of traffic to a cluster, identifying external traffic as coming from the host on which...

Design/Logic Flaw

Cilium is open source software for providing and securing network connectivity and loadbalancing between application workloads. Cilium prior to versions 1.9.16, 1.10.11, and 1.11.15 contains an incorrect default permissions vulnerability. Operating Systems with users belonging to the group ID 100...