api

Aug 13, 2024

Changes in this version

+ func ParseQualifiedName(qualifiedName string) (namespace, name, resourceName string)

Jul 24, 2024 GO-2024-3071 +1 more

  GO-2024-3071: Gateway API route matching order contradicts specification in github.com/cilium/cilium

  GO-2024-3074: Cilium leaks information via incorrect ReferenceGrant update logic in Gateway API in github.com/cilium/cilium

Changes in this version

+ var ErrFromToNodesRequiresNodeSelectorOption = fmt.Errorf("FromNodes/ToNodes rules can only be applied when the %q flag is set", ...)

+ var TestAllowIngressListener = false

type CIDRRule

+ func ExtractCidrSet(ctx context.Context, groups []Groups) ([]CIDRRule, error)

+ type DefaultDenyConfig struct

+ Egress *bool

+ Ingress *bool

+ func (in *DefaultDenyConfig) DeepCopy() *DefaultDenyConfig

+ func (in *DefaultDenyConfig) DeepCopyInto(out *DefaultDenyConfig)

+ func (in *DefaultDenyConfig) DeepEqual(other *DefaultDenyConfig) bool

type EgressCommonRule

+ ToNodes []EndpointSelector

type FQDNSelector

+ func (s *FQDNSelector) IdentityLabel() labels.Label

+ type Groups struct

+ AWS *AWSGroup

+ func (group *Groups) GetCidrSet(ctx context.Context) ([]CIDRRule, error)

+ func (in *Groups) DeepCopy() *Groups

+ func (in *Groups) DeepCopyInto(out *Groups)

+ func (in *Groups) DeepEqual(other *Groups) bool

type ICMPField

+ func (i *ICMPField) UnmarshalJSON(value []byte) error

type IngressCommonRule

+ FromGroups []Groups

+ FromNodes []EndpointSelector

+ func (e *IngressCommonRule) RequiresDerivative() bool

type IngressDenyRule

+ func (e *IngressDenyRule) CreateDerivative(ctx context.Context) (*IngressDenyRule, error)

type IngressRule

+ func (e *IngressRule) CreateDerivative(ctx context.Context) (*IngressRule, error)

type Listener

+ Priority uint16

type PortProtocol

+ EndPort int32

type Rule

+ EnableDefaultDeny DefaultDenyConfig

Sep 20, 2024 GO-2024-3208

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Aug 12, 2024 GO-2024-3208

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Jul 11, 2024 GO-2024-3071 +3 more

  GO-2024-3071: Gateway API route matching order contradicts specification in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3074: Cilium leaks information via incorrect ReferenceGrant update logic in Gateway API in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Jun 10, 2024 GO-2024-3071 +3 more

  GO-2024-3071: Gateway API route matching order contradicts specification in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3074: Cilium leaks information via incorrect ReferenceGrant update logic in Gateway API in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

May 10, 2024 GO-2024-2922 +4 more

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3071: Gateway API route matching order contradicts specification in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3074: Cilium leaks information via incorrect ReferenceGrant update logic in Gateway API in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Apr 11, 2024 GO-2024-2922 +4 more

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3071: Gateway API route matching order contradicts specification in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3074: Cilium leaks information via incorrect ReferenceGrant update logic in Gateway API in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Mar 26, 2024 GO-2024-2922 +4 more

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3071: Gateway API route matching order contradicts specification in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3074: Cilium leaks information via incorrect ReferenceGrant update logic in Gateway API in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Mar 13, 2024 GO-2024-2666 +5 more

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3071: Gateway API route matching order contradicts specification in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3074: Cilium leaks information via incorrect ReferenceGrant update logic in Gateway API in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Feb 14, 2024 GO-2024-2653 +8 more

  GO-2024-2653: HTTP policy bypass in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2657: Unencrypted traffic between nodes with WireGuard in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3071: Gateway API route matching order contradicts specification in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3074: Cilium leaks information via incorrect ReferenceGrant update logic in Gateway API in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Jan 31, 2024 GO-2024-2653 +8 more

  GO-2024-2653: HTTP policy bypass in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2657: Unencrypted traffic between nodes with WireGuard in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3071: Gateway API route matching order contradicts specification in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3074: Cilium leaks information via incorrect ReferenceGrant update logic in Gateway API in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Sep 20, 2024 GO-2024-3208

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Aug 12, 2024 GO-2024-3208

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Jul 11, 2024 GO-2024-3072 +1 more

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Jun 10, 2024 GO-2024-3072 +1 more

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

May 10, 2024 GO-2024-2922 +2 more

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Apr 11, 2024 GO-2024-2922 +2 more

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Mar 26, 2024 GO-2024-2922 +2 more

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Mar 13, 2024 GO-2024-2666 +3 more

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Feb 13, 2024 GO-2024-2653 +6 more

  GO-2024-2653: HTTP policy bypass in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2657: Unencrypted traffic between nodes with WireGuard in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Jan 18, 2024 GO-2024-2568 +8 more

  GO-2024-2568: Unencrypted ingress/health traffic when using Wireguard transparent encryption in github.com/cilium/cilium

  GO-2024-2569: Unencrypted traffic between pods when using Wireguard and an external kvstore in github.com/cilium/cilium

  GO-2024-2653: HTTP policy bypass in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2657: Unencrypted traffic between nodes with WireGuard in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Dec 11, 2023 GO-2024-2568 +8 more

  GO-2024-2568: Unencrypted ingress/health traffic when using Wireguard transparent encryption in github.com/cilium/cilium

  GO-2024-2569: Unencrypted traffic between pods when using Wireguard and an external kvstore in github.com/cilium/cilium

  GO-2024-2653: HTTP policy bypass in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2657: Unencrypted traffic between nodes with WireGuard in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Nov 10, 2023 GO-2024-2568 +8 more

  GO-2024-2568: Unencrypted ingress/health traffic when using Wireguard transparent encryption in github.com/cilium/cilium

  GO-2024-2569: Unencrypted traffic between pods when using Wireguard and an external kvstore in github.com/cilium/cilium

  GO-2024-2653: HTTP policy bypass in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2657: Unencrypted traffic between nodes with WireGuard in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Oct 18, 2023 GO-2024-2568 +8 more

  GO-2024-2568: Unencrypted ingress/health traffic when using Wireguard transparent encryption in github.com/cilium/cilium

  GO-2024-2569: Unencrypted traffic between pods when using Wireguard and an external kvstore in github.com/cilium/cilium

  GO-2024-2653: HTTP policy bypass in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2657: Unencrypted traffic between nodes with WireGuard in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Sep 11, 2023 GO-2024-2568 +8 more

  GO-2024-2568: Unencrypted ingress/health traffic when using Wireguard transparent encryption in github.com/cilium/cilium

  GO-2024-2569: Unencrypted traffic between pods when using Wireguard and an external kvstore in github.com/cilium/cilium

  GO-2024-2653: HTTP policy bypass in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2657: Unencrypted traffic between nodes with WireGuard in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Aug 11, 2023 GO-2023-2078 +11 more

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2568: Unencrypted ingress/health traffic when using Wireguard transparent encryption in github.com/cilium/cilium

  GO-2024-2569: Unencrypted traffic between pods when using Wireguard and an external kvstore in github.com/cilium/cilium

  GO-2024-2653: HTTP policy bypass in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2657: Unencrypted traffic between nodes with WireGuard in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Jul 27, 2023 GO-2023-2078 +11 more

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2568: Unencrypted ingress/health traffic when using Wireguard transparent encryption in github.com/cilium/cilium

  GO-2024-2569: Unencrypted traffic between pods when using Wireguard and an external kvstore in github.com/cilium/cilium

  GO-2024-2653: HTTP policy bypass in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2657: Unencrypted traffic between nodes with WireGuard in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Jul 17, 2023 GO-2024-3072

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jun 28, 2023 GO-2024-3072

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jun 16, 2023 GO-2024-3072

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jun 1, 2023 GO-2024-3072

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Apr 28, 2023 GO-2024-3072

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Apr 3, 2023 GO-2024-3072

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Mar 1, 2023 GO-2024-3072

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jul 17, 2023 GO-2024-3072

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jun 28, 2023 GO-2024-3072

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Apr 28, 2023 GO-2024-3072

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jul 11, 2024 GO-2024-3072

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jun 10, 2024 GO-2024-3072

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

May 10, 2024 GO-2024-2922 +1 more

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Apr 11, 2024 GO-2024-2922 +1 more

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Mar 26, 2024 GO-2024-2922 +1 more

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Mar 13, 2024 GO-2024-2666 +2 more

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Feb 13, 2024 GO-2024-2653 +4 more

  GO-2024-2653: HTTP policy bypass in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jan 18, 2024 GO-2024-2653 +4 more

  GO-2024-2653: HTTP policy bypass in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Dec 11, 2023 GO-2024-2653 +4 more

  GO-2024-2653: HTTP policy bypass in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Nov 13, 2023 GO-2024-2653 +4 more

  GO-2024-2653: HTTP policy bypass in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Oct 17, 2023 GO-2024-2656 +3 more

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Sep 11, 2023 GO-2024-2656 +3 more

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Aug 10, 2023 GO-2023-2078 +6 more

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jul 26, 2023 GO-2023-2078 +6 more

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jun 14, 2023 GO-2023-2078 +6 more

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

May 17, 2023 GO-2023-1862 +7 more

  GO-2023-1862: Cilium vulnerable to information leakage via incorrect ReferenceGrant handling in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Apr 17, 2023 GO-2023-1862 +7 more

  GO-2023-1862: Cilium vulnerable to information leakage via incorrect ReferenceGrant handling in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Mar 16, 2023 GO-2023-1730 +9 more

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-1862: Cilium vulnerable to information leakage via incorrect ReferenceGrant handling in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Feb 15, 2023 GO-2023-1643 +11 more

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1644: Cilium eBPF filters may be temporarily removed during agent restart in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-1862: Cilium vulnerable to information leakage via incorrect ReferenceGrant handling in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Changes in this version

+ type Auth struct

+ Type AuthType

+ func (in *Auth) DeepCopy() *Auth

+ func (in *Auth) DeepCopyInto(out *Auth)

+ func (in *Auth) DeepEqual(other *Auth) bool

+ type AuthType string

+ const AuthTypeNull

type EgressRule

+ Auth *Auth

type IngressRule

+ Auth *Auth

Jan 24, 2023 GO-2024-2656 +2 more

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Dec 22, 2022 GO-2024-2656 +2 more

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Dec 1, 2022 GO-2024-2656 +2 more

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Nov 1, 2022 GO-2024-2656 +2 more

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Sep 30, 2022 GO-2024-2656 +2 more

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Sep 1, 2022 GO-2024-2656 +2 more

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Feb 13, 2024 GO-2024-2656 +2 more

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jan 18, 2024 GO-2024-2656 +2 more

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Dec 11, 2023 GO-2024-2656 +2 more

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Nov 13, 2023 GO-2024-2656 +2 more

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Changes in this version

type L4Proto

+ func (l4 L4Proto) IsAny() bool

Oct 17, 2023 GO-2024-2656 +2 more

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Sep 11, 2023 GO-2024-2656 +2 more

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Aug 14, 2023 GO-2023-2078 +5 more

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jul 26, 2023 GO-2023-2078 +5 more

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jun 14, 2023 GO-2023-2078 +5 more

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

May 17, 2023 GO-2023-2078 +5 more

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Apr 17, 2023 GO-2023-2078 +5 more

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Mar 16, 2023 GO-2023-1730 +7 more

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Feb 13, 2023 GO-2023-1643 +8 more

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jan 26, 2023 GO-2023-1643 +8 more

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Dec 16, 2022 GO-2023-1643 +8 more

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Nov 16, 2022 GO-2023-1643 +8 more

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Oct 12, 2022 GO-2023-1643 +8 more

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Sep 14, 2022 GO-2023-1643 +8 more

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Aug 16, 2022 GO-2023-1643 +8 more

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jul 19, 2022 GO-2022-0959 +9 more

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jun 22, 2022 GO-2023-2078 +5 more

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

May 4, 2022 GO-2023-2078 +5 more

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Apr 11, 2022 GO-2023-2078 +5 more

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Mar 4, 2022 GO-2023-2078 +5 more

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Aug 10, 2023 GO-2023-2078 +5 more

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jul 26, 2023 GO-2023-2078 +5 more

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jun 14, 2023 GO-2023-2078 +5 more

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

May 15, 2023 GO-2023-2078 +5 more

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Apr 17, 2023 GO-2023-2078 +5 more

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Mar 16, 2023 GO-2023-1730 +7 more

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Feb 13, 2023 GO-2023-1643 +8 more

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jan 26, 2023 GO-2023-1643 +8 more

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Dec 16, 2022 GO-2023-1643 +8 more

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Nov 16, 2022 GO-2023-1643 +8 more

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Oct 11, 2022 GO-2023-1643 +8 more

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Sep 14, 2022 GO-2023-1643 +8 more

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Aug 15, 2022 GO-2023-1643 +8 more

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jul 15, 2022 GO-2022-0959 +9 more

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jun 13, 2022 GO-2022-0959 +9 more

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

May 10, 2022 GO-2022-0959 +9 more

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Apr 15, 2022 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Mar 28, 2022 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Feb 23, 2022 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jan 19, 2022 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Dec 6, 2021 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Nov 23, 2021 GO-2023-1643 +8 more

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Nov 19, 2021 GO-2023-1643 +8 more

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Nov 15, 2021 GO-2023-1643 +8 more

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Sep 30, 2021 GO-2023-1643 +8 more

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Feb 13, 2023 GO-2023-1643 +8 more

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jan 26, 2023 GO-2023-1643 +8 more

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Dec 16, 2022 GO-2023-1643 +8 more

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Nov 16, 2022 GO-2023-1643 +8 more

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Oct 11, 2022 GO-2023-1643 +8 more

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Sep 14, 2022 GO-2023-1643 +8 more

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Aug 15, 2022 GO-2023-1643 +8 more

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jul 15, 2022 GO-2022-0959 +9 more

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jun 10, 2022 GO-2022-0959 +9 more

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

May 10, 2022 GO-2022-0959 +9 more

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Apr 15, 2022 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Mar 28, 2022 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Feb 23, 2022 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jan 19, 2022 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Dec 10, 2021 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Oct 14, 2021 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Sep 1, 2021 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jul 15, 2021 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jul 2, 2021 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jun 16, 2021 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

May 20, 2021 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

May 17, 2021 GO-2022-0959 +9 more

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Apr 28, 2021 GO-2022-0959 +9 more

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Mar 11, 2021 GO-2022-0959 +9 more

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jul 15, 2022 GO-2022-0959 +9 more

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jun 10, 2022 GO-2022-0959 +9 more

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

May 9, 2022 GO-2022-0959 +9 more

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Apr 15, 2022 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Mar 28, 2022 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Feb 23, 2022 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jan 19, 2022 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Nov 5, 2021 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Sep 1, 2021 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jul 19, 2021 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

May 28, 2021 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

May 13, 2021 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Apr 20, 2021 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Mar 10, 2021 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Feb 3, 2021 GO-2022-0393 +12 more

  GO-2022-0393: Network policy may be bypassed by some ICMP Echo Requests in github.com/cilium/cilium

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jan 22, 2021 GO-2022-0393 +12 more

  GO-2022-0393: Network policy may be bypassed by some ICMP Echo Requests in github.com/cilium/cilium

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jan 20, 2021 GO-2022-0393 +12 more

  GO-2022-0393: Network policy may be bypassed by some ICMP Echo Requests in github.com/cilium/cilium

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Dec 4, 2020 GO-2022-0393 +12 more

  GO-2022-0393: Network policy may be bypassed by some ICMP Echo Requests in github.com/cilium/cilium

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Nov 10, 2020 GO-2022-0393 +12 more

  GO-2022-0393: Network policy may be bypassed by some ICMP Echo Requests in github.com/cilium/cilium

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Changes in this version

type EgressCommonRule

+ AggregatedSelectors EndpointSelectorSlice

type EndpointSelector

+ CachedLabelSelectorString string

+ Requirements *k8sLbls.Requirements

type IngressCommonRule

+ AggregatedSelectors EndpointSelectorSlice

type PortProtocol

+ func (pp *PortProtocol) Sanitize() error

Nov 3, 2020 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Oct 19, 2020 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Oct 13, 2020 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Aug 18, 2020 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Nov 5, 2021 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Sep 1, 2021 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jul 23, 2021 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

May 13, 2021 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Changes in this version

+ func KafkaApiKeyToString(apiKey int16) string

Apr 20, 2021 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Mar 10, 2021 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Feb 18, 2021 GO-2022-0393 +12 more

  GO-2022-0393: Network policy may be bypassed by some ICMP Echo Requests in github.com/cilium/cilium

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Dec 4, 2020 GO-2022-0393 +12 more

  GO-2022-0393: Network policy may be bypassed by some ICMP Echo Requests in github.com/cilium/cilium

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Oct 28, 2020 GO-2022-0393 +12 more

  GO-2022-0393: Network policy may be bypassed by some ICMP Echo Requests in github.com/cilium/cilium

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Oct 1, 2020 GO-2022-0393 +12 more

  GO-2022-0393: Network policy may be bypassed by some ICMP Echo Requests in github.com/cilium/cilium

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Sep 4, 2020 GO-2022-0393 +12 more

  GO-2022-0393: Network policy may be bypassed by some ICMP Echo Requests in github.com/cilium/cilium

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jul 23, 2020 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jul 2, 2020 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jun 22, 2020 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Changes in this version

type KafkaRole

+ func (in *KafkaRole) DeepEqual(other *KafkaRole) bool

type PortRuleKafka

+ func (in *PortRuleKafka) DeepEqual(other *PortRuleKafka) bool

Jun 19, 2020 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jun 15, 2020 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

May 29, 2020 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

May 21, 2020 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Apr 20, 2021 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Mar 10, 2021 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Feb 25, 2021 GO-2022-0393 +12 more

  GO-2022-0393: Network policy may be bypassed by some ICMP Echo Requests in github.com/cilium/cilium

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jan 27, 2021 GO-2022-0393 +12 more

  GO-2022-0393: Network policy may be bypassed by some ICMP Echo Requests in github.com/cilium/cilium

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Dec 4, 2020 GO-2022-0393 +12 more

  GO-2022-0393: Network policy may be bypassed by some ICMP Echo Requests in github.com/cilium/cilium

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Oct 28, 2020 GO-2022-0393 +12 more

  GO-2022-0393: Network policy may be bypassed by some ICMP Echo Requests in github.com/cilium/cilium

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Sep 30, 2020 GO-2022-0393 +12 more

  GO-2022-0393: Network policy may be bypassed by some ICMP Echo Requests in github.com/cilium/cilium

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Sep 2, 2020 GO-2022-0393 +12 more

  GO-2022-0393: Network policy may be bypassed by some ICMP Echo Requests in github.com/cilium/cilium

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Aug 28, 2020 GO-2022-0393 +12 more

  GO-2022-0393: Network policy may be bypassed by some ICMP Echo Requests in github.com/cilium/cilium

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Aug 5, 2020 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jul 2, 2020 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jun 12, 2020 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

May 15, 2020 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Apr 29, 2020 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Apr 3, 2020 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Mar 4, 2020 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Feb 18, 2020 GO-2022-0457 +11 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Changes in this version

type IngressRule

+ func (i *IngressRule) AllowsWildcarding() bool

type Rule

+ func (r *Rule) DeepEquals(r2 *Rule) bool

type Rules

+ func (rs Rules) DeepEquals(rs2 Rules) bool

Feb 13, 2020 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Feb 4, 2020 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jan 8, 2020 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Nov 19, 2019 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Sep 30, 2020 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Aug 3, 2020 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jul 2, 2020 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jun 5, 2020 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Mar 25, 2020 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Mar 4, 2020 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Feb 3, 2020 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Dec 16, 2019 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Nov 27, 2019 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Oct 8, 2019 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Sep 25, 2019 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Sep 9, 2019 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Aug 19, 2019 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Changes in this version

type IngressRule

+ func (i *IngressRule) GetSourceEndpointSelectorsWithRequirements(requirements []metav1.LabelSelectorRequirement) EndpointSelectorSlice

Aug 19, 2019 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Aug 16, 2019 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jul 31, 2019 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jul 24, 2019 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jul 22, 2019 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jul 3, 2019 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jun 17, 2019 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Mar 4, 2020 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Feb 3, 2020 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Dec 16, 2019 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Nov 27, 2019 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Oct 8, 2019 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Sep 9, 2019 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Aug 23, 2019 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Aug 16, 2019 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jul 11, 2019 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jul 10, 2019 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jul 2, 2019 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jun 6, 2019 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jun 4, 2019 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

May 29, 2019 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

May 17, 2019 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

May 9, 2019 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

May 9, 2019 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Apr 26, 2019 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Changes in this version

+ const APIVersionsKey

+ const AddPartitionsToTxnKey

+ const AlterReplicaLogDirsKey

+ const ConsumeRole

+ const CreatePartitionsKey

+ const CreateTopicsKey

+ const DeleteRecordsKey

+ const DeleteTopicsKey

+ const DescribeLogDirsKey

+ const FetchKey

+ const FindCoordinatorKey

+ const HeartbeatKey

+ const JoinGroupKey

+ const KafkaMaxTopicLen

+ const LeaderAndIsr

+ const LeaveGroupKey

+ const MaxCIDRPrefixLengths

+ const MetadataKey

+ const OffsetCommitKey

+ const OffsetFetchKey

+ const OffsetForLeaderEpochKey

+ const OffsetsKey

+ const ProduceKey

+ const ProduceRole

+ const StopReplica

+ const SyncgroupKey

+ const TxnOffsetCommitKey

+ const UpdateMetadata

+ const WriteTxnMarkersKey

+ var CIDRMatchAll = []CIDR

+ var KafkaAPIKeyMap = map[string]int16

+ var KafkaReverseAPIKeyMap = map[int16]string

+ var KafkaTopicValidChar = regexp.MustCompile(`^[a-zA-Z0-9\\._\\-]+$`)

type CIDR

+ func (c *CIDR) MatchesAll() bool

type CIDRRule

+ func IPsToCIDRRules(ips []net.IP) (cidrRules []CIDRRule)

type EgressRule

+ ToCIDRSet CIDRRuleSlice

+ ToEndpoints []EndpointSelector

+ ToEntities EntitySlice

+ ToGroups []ToGroups

+ ToRequires []EndpointSelector

+ ToServices []Service

+ func (e *EgressRule) GetDestinationEndpointSelectors() EndpointSelectorSlice

+ func (e *EgressRule) IsLabelBased() bool

+ func (e *EgressRule) RequiresDerivative() bool

type Entity

+ func (e Entity) Matches(ctx labels.LabelArray) bool

type EntitySlice

+ func (s EntitySlice) Matches(ctx labels.LabelArray) bool

type IngressRule

+ FromCIDRSet CIDRRuleSlice

+ FromEntities EntitySlice

+ func (i *IngressRule) GetSourceEndpointSelectors() EndpointSelectorSlice

+ func (i *IngressRule) IsLabelBased() bool

+ func (i *IngressRule) SetAggregatedSelectors()

+ type KafkaRole []int16

+ func (in KafkaRole) DeepCopy() KafkaRole

+ func (in KafkaRole) DeepCopyInto(out *KafkaRole)

+ type PortRuleKafka struct

+ APIKey string

+ APIVersion string

+ ClientID string

+ Role string

+ Topic string

+ func (in *PortRuleKafka) DeepCopy() *PortRuleKafka

+ func (in *PortRuleKafka) DeepCopyInto(out *PortRuleKafka)

+ func (k *PortRuleKafka) Equal(o PortRuleKafka) bool

+ func (k *PortRuleKafka) Exists(rules L7Rules) bool

+ func (kr *PortRuleKafka) CheckAPIKeyRole(kind int16) bool

+ func (kr *PortRuleKafka) GetAPIVersion() (int16, bool)

+ func (kr *PortRuleKafka) MapRoleToAPIKey() error

+ func (kr *PortRuleKafka) Sanitize() error

Apr 24, 2019 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Apr 19, 2019 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Apr 16, 2019 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Apr 8, 2019 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Mar 27, 2019 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Mar 19, 2019 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Aug 31, 2023 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Changes in this version

+ const AWSProvider

+ const IPv4Family

+ const IPv6Family

+ var EndpointSelectorNone = NewESFromLabels(labels.NewLabel(labels.IDNameNone, "", labels.LabelSourceReserved))

+ var EntitySelectorMapping = map[Entity]EndpointSelectorSlice

+ var FQDNMatchNameRegexString = `^([-a-zA-Z0-9_]+[.]?)+$`

+ var FQDNMatchPatternRegexString = `^([-a-zA-Z0-9_*]+[.]?)+$`

+ var ReservedEndpointSelectors = map[string]EndpointSelector

+ var WildcardEndpointSelector = NewESFromLabels()

+ func InitEntities(clusterName string, treatRemoteNodeAsHost bool)

+ func RegisterToGroupsProvider(providerName string, callback GroupProviderFunc)

+ func ResourceQualifiedName(namespace, cecName, resourceName string, options ...Option) string

+ type AWSGroup struct

+ Labels map[string]string

+ Region string

+ SecurityGroupsIds []string

+ SecurityGroupsNames []string

+ func (in *AWSGroup) DeepCopy() *AWSGroup

+ func (in *AWSGroup) DeepCopyInto(out *AWSGroup)

+ func (in *AWSGroup) DeepEqual(other *AWSGroup) bool

+ type Authentication struct

+ Mode AuthenticationMode

+ func (in *Authentication) DeepCopy() *Authentication

+ func (in *Authentication) DeepCopyInto(out *Authentication)

+ func (in *Authentication) DeepEqual(other *Authentication) bool

+ type AuthenticationMode string

+ const AuthenticationModeAlwaysFail

+ const AuthenticationModeDisabled

+ const AuthenticationModeRequired

+ type CIDRGroupRef string

+ type CIDRRule struct

+ CIDRGroupRef CIDRGroupRef

+ Cidr CIDR

+ ExceptCIDRs []CIDR

+ Generated bool

+ func (in *CIDRRule) DeepCopy() *CIDRRule

+ func (in *CIDRRule) DeepCopyInto(out *CIDRRule)

+ func (in *CIDRRule) DeepEqual(other *CIDRRule) bool

+ func (r CIDRRule) String() string

+ type CIDRRuleSlice []CIDRRule

+ func (in *CIDRRuleSlice) DeepEqual(other *CIDRRuleSlice) bool

+ func (in CIDRRuleSlice) DeepCopy() CIDRRuleSlice

+ func (in CIDRRuleSlice) DeepCopyInto(out *CIDRRuleSlice)

+ func (s CIDRRuleSlice) GetAsEndpointSelectors() EndpointSelectorSlice

+ func (s CIDRRuleSlice) StringSlice() []string

+ type CIDRSlice []CIDR

+ func ComputeResultantCIDRSet(cidrs CIDRRuleSlice) CIDRSlice

+ func (in *CIDRSlice) DeepEqual(other *CIDRSlice) bool

+ func (in CIDRSlice) DeepCopy() CIDRSlice

+ func (in CIDRSlice) DeepCopyInto(out *CIDRSlice)

+ func (s CIDRSlice) GetAsEndpointSelectors() EndpointSelectorSlice

+ func (s CIDRSlice) String() string

+ func (s CIDRSlice) StringSlice() []string

+ type EgressCommonRule struct

+ ToCIDR CIDRSlice

+ ToCIDRSet CIDRRuleSlice

+ ToEndpoints []EndpointSelector

+ ToEntities EntitySlice

+ ToGroups []ToGroups

+ ToRequires []EndpointSelector

+ ToServices []Service

+ func (e *EgressCommonRule) AllowsWildcarding() bool

+ func (e *EgressCommonRule) RequiresDerivative() bool

+ func (e *EgressCommonRule) SetAggregatedSelectors()

+ func (in *EgressCommonRule) DeepCopy() *EgressCommonRule

+ func (in *EgressCommonRule) DeepCopyInto(out *EgressCommonRule)

+ func (in *EgressCommonRule) DeepEqual(other *EgressCommonRule) bool

+ type EgressDenyRule struct

+ ICMPs ICMPRules

+ ToPorts PortDenyRules

+ func (e *EgressDenyRule) CreateDerivative(ctx context.Context) (*EgressDenyRule, error)

+ func (e *EgressDenyRule) GetDestinationEndpointSelectorsWithRequirements(requirements []slim_metav1.LabelSelectorRequirement) EndpointSelectorSlice

+ func (in *EgressDenyRule) DeepCopy() *EgressDenyRule

+ func (in *EgressDenyRule) DeepCopyInto(out *EgressDenyRule)

+ func (in *EgressDenyRule) DeepEqual(other *EgressDenyRule) bool

type EgressRule

+ Authentication *Authentication

+ ICMPs ICMPRules

+ ToFQDNs FQDNSelectorSlice

+ func (e *EgressRule) AllowsWildcarding() bool

+ func (e *EgressRule) CreateDerivative(ctx context.Context) (*EgressRule, error)

+ func (e *EgressRule) GetDestinationEndpointSelectorsWithRequirements(requirements []slim_metav1.LabelSelectorRequirement) EndpointSelectorSlice

+ func (e *EgressRule) SetAggregatedSelectors()

+ func (in *EgressRule) DeepCopy() *EgressRule

+ func (in *EgressRule) DeepCopyInto(out *EgressRule)

+ func (in *EgressRule) DeepEqual(other *EgressRule) bool

type EndpointSelector

+ func NewESFromMatchRequirements(matchLabels map[string]string, reqs []slim_metav1.LabelSelectorRequirement) EndpointSelector

+ func (in *EndpointSelector) DeepCopy() *EndpointSelector

+ func (in *EndpointSelector) DeepCopyInto(out *EndpointSelector)

+ func (in *EndpointSelector) DeepEqual(other *EndpointSelector) bool

+ func (n *EndpointSelector) AddMatch(key, value string)

+ func (n *EndpointSelector) AddMatchExpression(key string, op slim_metav1.LabelSelectorOperator, values []string)

+ func (n *EndpointSelector) ConvertToLabelSelectorRequirementSlice() []slim_metav1.LabelSelectorRequirement

+ func (n *EndpointSelector) IsWildcard() bool

+ func (n *EndpointSelector) LabelSelectorString() string

+ func (n *EndpointSelector) SyncRequirementsWithLabelSelector()

+ func (n EndpointSelector) CachedString() string

+ func (n EndpointSelector) GetMatch(key string) ([]string, bool)

+ func (n EndpointSelector) HasKey(key string) bool

+ type EndpointSelectorSlice []EndpointSelector

+ func (in *EndpointSelectorSlice) DeepEqual(other *EndpointSelectorSlice) bool

+ func (in EndpointSelectorSlice) DeepCopy() EndpointSelectorSlice

+ func (in EndpointSelectorSlice) DeepCopyInto(out *EndpointSelectorSlice)

+ func (s EndpointSelectorSlice) Len() int

+ func (s EndpointSelectorSlice) Less(i, j int) bool

+ func (s EndpointSelectorSlice) Matches(ctx labels.LabelArray) bool

+ func (s EndpointSelectorSlice) SelectsAllEndpoints() bool

+ func (s EndpointSelectorSlice) Swap(i, j int)

+ type Entity string

+ const EntityAll

+ const EntityCluster

+ const EntityHealth

+ const EntityHost

+ const EntityIngress

+ const EntityInit

+ const EntityKubeAPIServer

+ const EntityNone

+ const EntityRemoteNode

+ const EntityUnmanaged

+ const EntityWorld

+ const EntityWorldIPv4

+ const EntityWorldIPv6

+ type EntitySlice []Entity

+ func (in *EntitySlice) DeepEqual(other *EntitySlice) bool

+ func (in EntitySlice) DeepCopy() EntitySlice

+ func (in EntitySlice) DeepCopyInto(out *EntitySlice)

+ func (s EntitySlice) GetAsEndpointSelectors() EndpointSelectorSlice

+ type EnvoyConfig struct

+ Kind string

+ Name string

+ func (in *EnvoyConfig) DeepCopy() *EnvoyConfig

+ func (in *EnvoyConfig) DeepCopyInto(out *EnvoyConfig)

+ func (in *EnvoyConfig) DeepEqual(other *EnvoyConfig) bool

+ type FQDNSelector struct

+ MatchName string

+ MatchPattern string

+ func (in *FQDNSelector) DeepCopy() *FQDNSelector

+ func (in *FQDNSelector) DeepCopyInto(out *FQDNSelector)

+ func (in *FQDNSelector) DeepEqual(other *FQDNSelector) bool

+ func (s *FQDNSelector) GetAsEndpointSelectors() EndpointSelectorSlice

+ func (s *FQDNSelector) String() string

+ func (s *FQDNSelector) ToRegex() (*regexp.Regexp, error)

+ type FQDNSelectorSlice []FQDNSelector

+ func (in *FQDNSelectorSlice) DeepEqual(other *FQDNSelectorSlice) bool

+ func (in FQDNSelectorSlice) DeepCopy() FQDNSelectorSlice

+ func (in FQDNSelectorSlice) DeepCopyInto(out *FQDNSelectorSlice)

+ func (s FQDNSelectorSlice) GetAsEndpointSelectors() EndpointSelectorSlice

+ type GroupProviderFunc func(context.Context, *ToGroups) ([]netip.Addr, error)

+ type HeaderMatch struct

+ Mismatch MismatchAction

+ Name string

+ Secret *Secret

+ Value string

+ func (h *HeaderMatch) Equal(o *HeaderMatch) bool

+ func (in *HeaderMatch) DeepCopy() *HeaderMatch

+ func (in *HeaderMatch) DeepCopyInto(out *HeaderMatch)

+ func (in *HeaderMatch) DeepEqual(other *HeaderMatch) bool

+ type ICMPField struct

+ Family string

+ Type uint8

+ func (i ICMPField) PortProtocol() *PortProtocol

+ func (in *ICMPField) DeepCopy() *ICMPField

+ func (in *ICMPField) DeepCopyInto(out *ICMPField)

+ func (in *ICMPField) DeepEqual(other *ICMPField) bool

+ type ICMPRule struct

+ Fields []ICMPField

+ func (in *ICMPRule) DeepCopy() *ICMPRule

+ func (in *ICMPRule) DeepCopyInto(out *ICMPRule)

+ func (in *ICMPRule) DeepEqual(other *ICMPRule) bool

+ func (ir ICMPRule) GetPortProtocols() []PortProtocol

+ func (ir ICMPRule) GetPortRule() *PortRule

+ type ICMPRules []ICMPRule

+ func (in *ICMPRules) DeepEqual(other *ICMPRules) bool

+ func (in ICMPRules) DeepCopy() ICMPRules

+ func (in ICMPRules) DeepCopyInto(out *ICMPRules)

+ func (ir ICMPRules) Iterate(f func(pr Ports) error) error

+ func (ir ICMPRules) Len() int

+ type IngressCommonRule struct

+ FromCIDR CIDRSlice

+ FromCIDRSet CIDRRuleSlice

+ FromEndpoints []EndpointSelector

+ FromEntities EntitySlice

+ FromRequires []EndpointSelector

+ func (i *IngressCommonRule) AllowsWildcarding() bool

+ func (i *IngressCommonRule) GetSourceEndpointSelectorsWithRequirements(requirements []slim_metav1.LabelSelectorRequirement) EndpointSelectorSlice

+ func (i *IngressCommonRule) SetAggregatedSelectors()

+ func (in *IngressCommonRule) DeepCopy() *IngressCommonRule

+ func (in *IngressCommonRule) DeepCopyInto(out *IngressCommonRule)

+ func (in *IngressCommonRule) DeepEqual(other *IngressCommonRule) bool

+ type IngressDenyRule struct

+ ICMPs ICMPRules

+ ToPorts PortDenyRules

+ func (in *IngressDenyRule) DeepCopy() *IngressDenyRule

+ func (in *IngressDenyRule) DeepCopyInto(out *IngressDenyRule)

+ func (in *IngressDenyRule) DeepEqual(other *IngressDenyRule) bool

type IngressRule

+ Authentication *Authentication

+ ICMPs ICMPRules

+ func (in *IngressRule) DeepCopy() *IngressRule

+ func (in *IngressRule) DeepCopyInto(out *IngressRule)

+ func (in *IngressRule) DeepEqual(other *IngressRule) bool

+ type K8sServiceNamespace struct

+ Namespace string

+ ServiceName string

+ func (in *K8sServiceNamespace) DeepCopy() *K8sServiceNamespace

+ func (in *K8sServiceNamespace) DeepCopyInto(out *K8sServiceNamespace)

+ func (in *K8sServiceNamespace) DeepEqual(other *K8sServiceNamespace) bool

+ type K8sServiceSelectorNamespace struct

+ Namespace string

+ Selector ServiceSelector

+ func (in *K8sServiceSelectorNamespace) DeepCopy() *K8sServiceSelectorNamespace

+ func (in *K8sServiceSelectorNamespace) DeepCopyInto(out *K8sServiceSelectorNamespace)

+ func (in *K8sServiceSelectorNamespace) DeepEqual(other *K8sServiceSelectorNamespace) bool

+ type L4Proto string

+ const PortProtocolAny

+ const ProtoAny

+ const ProtoICMP

+ const ProtoICMPv6

+ const ProtoSCTP

+ const ProtoTCP

+ const ProtoUDP

+ func ParseL4Proto(proto string) (L4Proto, error)

+ func (l4 L4Proto) Validate() error

type L7Rules

+ DNS []PortRuleDNS

+ Kafka []kafka.PortRule

+ L7 []PortRuleL7

+ L7Proto string

+ func (in *L7Rules) DeepCopy() *L7Rules

+ func (in *L7Rules) DeepCopyInto(out *L7Rules)

+ func (in *L7Rules) DeepEqual(other *L7Rules) bool

+ func (rules *L7Rules) IsEmpty() bool

+ func (rules *L7Rules) Len() int

+ type Listener struct

+ EnvoyConfig *EnvoyConfig

+ Name string

+ func (in *Listener) DeepCopy() *Listener

+ func (in *Listener) DeepCopyInto(out *Listener)

+ func (in *Listener) DeepEqual(other *Listener) bool

+ type MismatchAction string

+ const MismatchActionAdd

+ const MismatchActionDelete

+ const MismatchActionLog

+ const MismatchActionReplace

+ type Option int

+ const ForceNamespace

+ type PortDenyRule struct

+ Ports []PortProtocol

+ func (in *PortDenyRule) DeepCopy() *PortDenyRule

+ func (in *PortDenyRule) DeepCopyInto(out *PortDenyRule)

+ func (in *PortDenyRule) DeepEqual(other *PortDenyRule) bool

+ func (pd *PortDenyRule) GetPortRule() *PortRule

+ func (pd PortDenyRule) GetPortProtocols() []PortProtocol

+ type PortDenyRules []PortDenyRule

+ func (in *PortDenyRules) DeepEqual(other *PortDenyRules) bool

+ func (in PortDenyRules) DeepCopy() PortDenyRules

+ func (in PortDenyRules) DeepCopyInto(out *PortDenyRules)

+ func (pr PortDenyRules) Iterate(f func(pr Ports) error) error

+ func (pr PortDenyRules) Len() int

type PortProtocol

+ func (in *PortProtocol) DeepCopy() *PortProtocol

+ func (in *PortProtocol) DeepCopyInto(out *PortProtocol)

+ func (in *PortProtocol) DeepEqual(other *PortProtocol) bool

+ func (p PortProtocol) Covers(other PortProtocol) bool

type PortRule

+ Listener *Listener

+ OriginatingTLS *TLSContext

+ ServerNames []string

+ TerminatingTLS *TLSContext

+ func (in *PortRule) DeepCopy() *PortRule

+ func (in *PortRule) DeepCopyInto(out *PortRule)

+ func (in *PortRule) DeepEqual(other *PortRule) bool

+ func (pd *PortRule) GetPortRule() *PortRule

+ func (pd PortRule) GetPortProtocols() []PortProtocol

+ type PortRuleDNS FQDNSelector

+ func (d *PortRuleDNS) Equal(o PortRuleDNS) bool

+ func (d *PortRuleDNS) Exists(rules L7Rules) bool

+ func (in *PortRuleDNS) DeepCopy() *PortRuleDNS

+ func (in *PortRuleDNS) DeepCopyInto(out *PortRuleDNS)

+ func (in *PortRuleDNS) DeepEqual(other *PortRuleDNS) bool

+ func (r *PortRuleDNS) Sanitize() error

type PortRuleHTTP

+ HeaderMatches []*HeaderMatch

+ func (h *PortRuleHTTP) Equal(o PortRuleHTTP) bool

+ func (h *PortRuleHTTP) Exists(rules L7Rules) bool

+ func (h *PortRuleHTTP) Sanitize() error

+ func (in *PortRuleHTTP) DeepCopy() *PortRuleHTTP

+ func (in *PortRuleHTTP) DeepCopyInto(out *PortRuleHTTP)

+ func (in *PortRuleHTTP) DeepEqual(other *PortRuleHTTP) bool

+ type PortRuleL7 map[string]string

+ func (h *PortRuleL7) Equal(o PortRuleL7) bool

+ func (h *PortRuleL7) Exists(rules L7Rules) bool

+ func (in *PortRuleL7) DeepEqual(other *PortRuleL7) bool

+ func (in PortRuleL7) DeepCopy() PortRuleL7

+ func (in PortRuleL7) DeepCopyInto(out *PortRuleL7)

+ func (rule *PortRuleL7) Sanitize() error

+ type PortRules []PortRule

+ func (in *PortRules) DeepEqual(other *PortRules) bool

+ func (in PortRules) DeepCopy() PortRules

+ func (in PortRules) DeepCopyInto(out *PortRules)

+ func (pr PortRules) Iterate(f func(pr Ports) error) error

+ func (pr PortRules) Len() int

+ type Ports interface

+ GetPortProtocols func() []PortProtocol

+ GetPortRule func() *PortRule

+ type PortsIterator interface

+ Iterate func(f func(pr Ports) error) error

+ Len func() int

type Rule

+ EgressDeny []EgressDenyRule

+ IngressDeny []IngressDenyRule

+ NodeSelector EndpointSelector

+ func NewRule() *Rule

+ func (in *Rule) DeepCopy() *Rule

+ func (in *Rule) DeepCopyInto(out *Rule)

+ func (r *Rule) CreateDerivative(ctx context.Context) (*Rule, error)

+ func (r *Rule) DeepEqual(o *Rule) bool

+ func (r *Rule) MarshalJSON() ([]byte, error)

+ func (r *Rule) RequiresDerivative() bool

+ func (r *Rule) WithDescription(desc string) *Rule

+ func (r *Rule) WithEgressDenyRules(rules []EgressDenyRule) *Rule

+ func (r *Rule) WithEgressRules(rules []EgressRule) *Rule

+ func (r *Rule) WithEndpointSelector(es EndpointSelector) *Rule

+ func (r *Rule) WithIngressDenyRules(rules []IngressDenyRule) *Rule

+ func (r *Rule) WithIngressRules(rules []IngressRule) *Rule

+ func (r *Rule) WithLabels(labels labels.LabelArray) *Rule

+ func (r Rule) Sanitize() error

type Rules

+ func (in Rules) DeepCopy() Rules

+ func (in Rules) DeepCopyInto(out *Rules)

+ func (rs *Rules) DeepEqual(other *Rules) bool

+ func (rs Rules) String() string

+ type Secret struct

+ Name string

+ Namespace string

+ func (a *Secret) Equal(b *Secret) bool

+ func (in *Secret) DeepCopy() *Secret

+ func (in *Secret) DeepCopyInto(out *Secret)

+ func (in *Secret) DeepEqual(other *Secret) bool

+ type Service struct

+ K8sService *K8sServiceNamespace

+ K8sServiceSelector *K8sServiceSelectorNamespace

+ func (in *Service) DeepCopy() *Service

+ func (in *Service) DeepCopyInto(out *Service)

+ func (in *Service) DeepEqual(other *Service) bool

+ type ServiceSelector EndpointSelector

+ func (in *ServiceSelector) DeepCopy() *ServiceSelector

+ func (in *ServiceSelector) DeepCopyInto(out *ServiceSelector)

+ func (in *ServiceSelector) DeepEqual(other *ServiceSelector) bool

+ type TLSContext struct

+ Certificate string

+ PrivateKey string

+ Secret *Secret

+ TrustedCA string

+ func (in *TLSContext) DeepCopy() *TLSContext

+ func (in *TLSContext) DeepCopyInto(out *TLSContext)

+ func (in *TLSContext) DeepEqual(other *TLSContext) bool

+ type ToGroups struct

+ AWS *AWSGroup

+ func (group *ToGroups) GetCidrSet(ctx context.Context) ([]CIDRRule, error)

+ func (in *ToGroups) DeepCopy() *ToGroups

+ func (in *ToGroups) DeepCopyInto(out *ToGroups)

+ func (in *ToGroups) DeepEqual(other *ToGroups) bool

Jul 21, 2017 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Changes in this version

type CIDR

+ func (cidr CIDR) Validate() error

May 30, 2017 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Changes in this version

+ type CIDR struct

+ IP string

+ type Decision byte

+ const Allowed

+ const Denied

+ const Undecided

+ func (d *Decision) UnmarshalJSON(b []byte) error

+ func (d Decision) MarshalJSON() ([]byte, error)

+ func (d Decision) String() string

+ type EgressRule struct

+ ToCIDR []CIDR

+ ToPorts []PortRule

+ func (e EgressRule) Validate() error

+ type EndpointSelector struct

+ func NewESFromK8sLabelSelector(srcPrefix string, ls *metav1.LabelSelector) EndpointSelector

+ func NewESFromLabels(lbls ...*labels.Label) EndpointSelector

+ func (n *EndpointSelector) Matches(lblsToMatch k8sLbls.Labels) bool

+ func (n *EndpointSelector) UnmarshalJSON(b []byte) error

+ func (n EndpointSelector) HasKeyPrefix(prefix string) bool

+ func (n EndpointSelector) MarshalJSON() ([]byte, error)

+ func (n EndpointSelector) String() string

+ type IngressRule struct

+ FromCIDR []CIDR

+ FromEndpoints []EndpointSelector

+ FromRequires []EndpointSelector

+ ToPorts []PortRule

+ func (i IngressRule) Validate() error

+ type L7Rules struct

+ HTTP []PortRuleHTTP

+ type PortProtocol struct

+ Port string

+ Protocol string

+ func (pp PortProtocol) Validate() error

+ type PortRule struct

+ Ports []PortProtocol

+ RedirectPort int

+ Rules *L7Rules

+ func (pr PortRule) Validate() error

+ type PortRuleHTTP struct

+ Headers []string

+ Host string

+ Method string

+ Path string

+ type Rule struct

+ Description string

+ Egress []EgressRule

+ EndpointSelector EndpointSelector

+ Ingress []IngressRule

+ Labels labels.LabelArray

+ func (r Rule) Validate() error

+ type Rules []*Rule

May 24, 2017 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium