CVE-2024-40635 vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent, opa, spegel, fuse-overlayfs-snapshotter, grype-fips, docker-compose-fips, docker-cli-buildx-fips, helm, consul-k8s-fips, flux-source-controller-fips, cluster-api-helm-controller, buildkitd-fips, k8ssandra-client-fips, neuvector-fips,...

GHSA-QXP5-GWG8-XV66 vulnerabilities

Vulnerabilities for packages: guac, skopeo, pulumi, nsc, restic, kine, glow, crossplane-provider-aws-sqs, osv-scanner, yunikorn-k8shim, openbao, controller-gen, xeol, rabbitmq-cluster-operator, cni-plugins, actions-runner-controller, crossplane-provider-aws-cloudwatchlogs, harbor-scanner-trivy,...

GO-2023-1653 `cilium-cli` disables etcd authorization for clustermesh clusters in github.com/cilium/cilium-cli

cilium-cli disables etcd authorization for clustermesh clusters in github.com/cilium/cilium-cli...

GHSA-VWF8-Q6FW-4WCM vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, hubble, hubble-ui, cilium-fips, cilium-cli, cilium, hubble-fips...

GHSA-VWF8-Q6FW-4WCM vulnerabilities

Vulnerabilities for packages: cilium-cli, hubble, hubble-ui...

CVE-2024-42486 vulnerabilities

Vulnerabilities for packages: cilium-cli, hubble, hubble-ui...

GHSA-QCM3-7879-XCWW vulnerabilities

Vulnerabilities for packages: cilium-cli, hubble, hubble-ui...

GHSA-QCM3-7879-XCWW vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, hubble, hubble-ui, cilium-fips, cilium-cli, cilium, hubble-fips...

CVE-2024-42487 vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, hubble, hubble-ui, cilium-fips, cilium-cli, cilium, hubble-fips...

OPENSUSE-SU-2024:12695-1 cilium-cli-0.12.13-1.1 on GA media

These are all security issues fixed in the cilium-cli-0.12.13-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-JW44-4F3J-Q396 vulnerabilities

Vulnerabilities for packages: cilium-cli, k9s...

GHSA-JW44-4F3J-Q396 vulnerabilities

Vulnerabilities for packages: cilium-cli, k9s...

CVE-2019-25210 vulnerabilities

Vulnerabilities for packages: cilium-cli, k9s...

CVE-2019-25210 vulnerabilities

Vulnerabilities for packages: cilium-cli, k9s...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: k8sgpt, trivy, zot, k9s, flux-source-controller, kots, kubevela, up, flux-helm-controller, helm-push, zarf, cilium-cli, kubescape, eksctl, chartmuseum, helm-operator...

GHSA-V53G-5GJP-272R vulnerabilities

Vulnerabilities for packages: up, helm-push, k9s, flux-source-controller, trivy, zot, chartmuseum, helm-operator, cilium-cli, k8sgpt, kots, kubevela, zarf, eksctl, flux-helm-controller, kubescape...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: k8sgpt, trivy, zot, k9s, flux-source-controller, kots, kubevela, up, flux-helm-controller, helm-push, zarf, cilium-cli, kubescape, eksctl, chartmuseum, helm-operator...

Privilege Escalation

github.com/cilium/cilium-cli is vulnerable to Privilege Escalation. The vulnerability exists due to the incorrect mount point specification in the generateDeployment function of clustermesh.go, which overwrites the permissions specified in the initContainer when using cilium-cli to configure a...

SUSE CVE-2023-28114

cilium-cli is the command line interface to install, manage, and troubleshoot Kubernetes clusters running Cilium. Prior to version 0.13.2,cilium-cli, when used to configure cluster mesh functionality, can remove the enforcement of user permissions on the etcd store used to mirror local cluster...

CVE-2023-28114

cilium-cli is the command line interface to install, manage, and troubleshoot Kubernetes clusters running Cilium. Prior to version 0.13.2,cilium-cli, when used to configure cluster mesh functionality, can remove the enforcement of user permissions on the etcd store used to mirror local cluster...