EUVD-2025-12230

Malicious code in bioql PyPI...

EUVD-2023-1449

Malicious code in bioql PyPI...

PT-2025-46740

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to a metadata destination metadata dst leak within the bpf redirect neigh v4,6 function. This issue occurs in systems utilizing the Cilium BPF...

Linux Distros Unpatched Vulnerability : CVE-2025-30163

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Node based network policies fromNodes and toNodes will incorrectly...

Linux Distros Unpatched Vulnerability : CVE-2025-30162

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cilium is a networking, observability, and security solution with an eBPF-based dataplane. For Cilium users who use Gateway API for Ingress for some services an...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: op-geth, terraform-provider-azapi-fips, pulumi-language-java, metallb, boring-registry, sigstore-scaffolding-fips, azure-aad-pod-identity-mic, gcp-compute-persistent-disk-csi-driver-fips, docker-cli, docker-fips, gosu-fips, step-ca, kubelet-csr-approver, yunikorn-web...

Linux Distros Unpatched Vulnerability : CVE-2025-37959

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Scrub packet on bpfredirectpeer When bpfredirectpeer is used to redirect packets to a device in another network namespace, the skb isn't scrubbed. That can...

Linux Distros Unpatched Vulnerability : CVE-2025-22021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: socket: Lookup orig tuple for IPv6 SNAT nfsklookupslowv4 does the conntrack lookup for IPv4 packets to restore the original 5-tuple in case of SNAT, ...

CVE-2025-53547 vulnerabilities

Vulnerabilities for packages: linkerd2, chart-testing, pluto, cerbos, zot, rancher-helm, envoy-gateway, cilium-cli, cluster-api-helm-controller, helm-push, zarf, k9s, flux-source-controller, k8sgpt, k8ssandra-client, istio, helm-operator, eksctl, trivy, chartmuseum, helm-docs, cert-manager-cmctl,...

GHSA-557J-XG8C-Q2MM vulnerabilities

Vulnerabilities for packages: linkerd2, chart-testing, pluto, cerbos, zot, rancher-helm, envoy-gateway, cilium-cli, cluster-api-helm-controller, helm-push, zarf, k9s, flux-source-controller, k8sgpt, k8ssandra-client, istio, helm-operator, eksctl, trivy, chartmuseum, helm-docs, cert-manager-cmctl,...

CVE-2025-53547 vulnerabilities

Vulnerabilities for packages: zarf, helm-push, flux-fips, chart-testing, linkerd2-fips, cluster-api-helm-controller, consul-k8s, pluto, cerbos, trivy-fips, k8ssandra-client, chart-testing-fips, harbor-fips, rancher-fleet, consul-k8s-fips, cerbos-fips, flux-source-controller-fips, harbor,...

GHSA-557J-XG8C-Q2MM vulnerabilities

Vulnerabilities for packages: zarf, helm-push, flux-fips, chart-testing, linkerd2-fips, cluster-api-helm-controller, consul-k8s, pluto, cerbos, trivy-fips, k8ssandra-client, chart-testing-fips, harbor-fips, rancher-fleet, consul-k8s-fips, cerbos-fips, flux-source-controller-fips, harbor,...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: vmxnet3: Fixed malformed packet sizes in vmxnet3processxdp. The XDP handling of the vmxnet3 driver is buggy for packet sizes using ring0 i.e., packet sizes between 128 and 3k bytes. We noticed connectivity issues related to MT...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: bpf: Scrubbing packets on bpfredirectpeer When bpfredirectpeer is used to redirect packets to a device in another network namespace, the packets are not scrubbed. This can lead to information about the packets being “misused” in...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: netfilter: socket: Lookup orig tuple for IPv6 SNAT The nfsklookupslowv4 function performs the conntrack lookup for IPv4 packets in order to restore the original 5-tuple in case of SNAT, so that the correct socket if any can be...

CVE-2025-4673 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-microsoft-azure, cni-plugins, kafkaexporter, kubernetes-csi-driver-nfs, fluent-operator, restic, kubewatch, fulcio, helm-push, nsc, kubernetes-csi-external-attacher, step-kms-plugin, ollama, litestream, flannel-cni-plugin, kubernetes-replicator,...

The vulnerability of the DNS server software used for network security in Cilium allows a attacker to cause a service failure.

The vulnerability of the DNS server used by the Cilium networking security software is related to the unlimited distribution of resources during the processing of the DNSZombieMapping list. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

Control Character Injection

github.com/cilium/hubble is vulnerable to control character injection. The vulnerability is due to improper sanitization of control characters in the terminal output when monitoring Kafka traffic using Layer 7 Protocol Visibility and allows an attacker to manipulate output, conceal log entries, o...

GO-2025-3700 Character injection in Hubble CLI in github.com/cilium/hubble

Character injection in Hubble CLI in github.com/cilium/hubble...

CVE-2025-23028

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. A denial of service vulnerability affects versions 1.14.0 through 1.14.7, 1.15.0 through 1.15.11, and 1.16.0 through 1.16.4. In a Kubernetes cluster where Cilium is configured to proxy DNS traffic, an...