k8s

Feb 3, 2025

Changes in this version

type Resources

+ ServiceExports resource.Resource[*mcsapiv1alpha1.ServiceExport]

Dec 12, 2024 GO-2025-3416

  GO-2025-3416: Cilium has an information leakage via insecure default Hubble UI CORS header in github.com/cilium/cilium

Nov 14, 2024 GO-2025-3415 +1 more

  GO-2025-3415: DoS in Cilium agent DNS proxy from crafted DNS responses in github.com/cilium/cilium

  GO-2025-3416: Cilium has an information leakage via insecure default Hubble UI CORS header in github.com/cilium/cilium

Oct 10, 2024 GO-2024-3290 +2 more

  GO-2024-3290: Cilium's Layer 7 policy enforcement may not occur in policies with wildcarded port ranges in github.com/cilium/cilium

  GO-2025-3415: DoS in Cilium agent DNS proxy from crafted DNS responses in github.com/cilium/cilium

  GO-2025-3416: Cilium has an information leakage via insecure default Hubble UI CORS header in github.com/cilium/cilium

Sep 20, 2024 GO-2024-3290 +2 more

  GO-2024-3290: Cilium's Layer 7 policy enforcement may not occur in policies with wildcarded port ranges in github.com/cilium/cilium

  GO-2025-3415: DoS in Cilium agent DNS proxy from crafted DNS responses in github.com/cilium/cilium

  GO-2025-3416: Cilium has an information leakage via insecure default Hubble UI CORS header in github.com/cilium/cilium

Aug 13, 2024 GO-2024-3290 +2 more

  GO-2024-3290: Cilium's Layer 7 policy enforcement may not occur in policies with wildcarded port ranges in github.com/cilium/cilium

  GO-2025-3415: DoS in Cilium agent DNS proxy from crafted DNS responses in github.com/cilium/cilium

  GO-2025-3416: Cilium has an information leakage via insecure default Hubble UI CORS header in github.com/cilium/cilium

Jul 24, 2024 GO-2024-3071 +4 more

  GO-2024-3071: Gateway API route matching order contradicts specification in github.com/cilium/cilium

  GO-2024-3074: Cilium leaks information via incorrect ReferenceGrant update logic in Gateway API in github.com/cilium/cilium

  GO-2024-3290: Cilium's Layer 7 policy enforcement may not occur in policies with wildcarded port ranges in github.com/cilium/cilium

  GO-2025-3415: DoS in Cilium agent DNS proxy from crafted DNS responses in github.com/cilium/cilium

  GO-2025-3416: Cilium has an information leakage via insecure default Hubble UI CORS header in github.com/cilium/cilium

Changes in this version

+ func CiliumNodeResource(params k8s.CiliumResourceParams, opts ...func(*metav1.ListOptions)) (resource.Resource[*cilium_api_v2.CiliumNode], error)

Dec 12, 2024 GO-2025-3416

  GO-2025-3416: Cilium has an information leakage via insecure default Hubble UI CORS header in github.com/cilium/cilium

Nov 14, 2024 GO-2025-3415 +1 more

  GO-2025-3415: DoS in Cilium agent DNS proxy from crafted DNS responses in github.com/cilium/cilium

  GO-2025-3416: Cilium has an information leakage via insecure default Hubble UI CORS header in github.com/cilium/cilium

Oct 10, 2024 GO-2025-3415 +1 more

  GO-2025-3415: DoS in Cilium agent DNS proxy from crafted DNS responses in github.com/cilium/cilium

  GO-2025-3416: Cilium has an information leakage via insecure default Hubble UI CORS header in github.com/cilium/cilium

Sep 20, 2024 GO-2024-3208 +2 more

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

  GO-2025-3415: DoS in Cilium agent DNS proxy from crafted DNS responses in github.com/cilium/cilium

  GO-2025-3416: Cilium has an information leakage via insecure default Hubble UI CORS header in github.com/cilium/cilium

Aug 12, 2024 GO-2024-3208 +2 more

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

  GO-2025-3415: DoS in Cilium agent DNS proxy from crafted DNS responses in github.com/cilium/cilium

  GO-2025-3416: Cilium has an information leakage via insecure default Hubble UI CORS header in github.com/cilium/cilium

Jul 11, 2024 GO-2024-3071 +5 more

  GO-2024-3071: Gateway API route matching order contradicts specification in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3074: Cilium leaks information via incorrect ReferenceGrant update logic in Gateway API in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

  GO-2025-3415: DoS in Cilium agent DNS proxy from crafted DNS responses in github.com/cilium/cilium

  GO-2025-3416: Cilium has an information leakage via insecure default Hubble UI CORS header in github.com/cilium/cilium

Jun 10, 2024 GO-2024-3071 +5 more

  GO-2024-3071: Gateway API route matching order contradicts specification in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3074: Cilium leaks information via incorrect ReferenceGrant update logic in Gateway API in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

  GO-2025-3415: DoS in Cilium agent DNS proxy from crafted DNS responses in github.com/cilium/cilium

  GO-2025-3416: Cilium has an information leakage via insecure default Hubble UI CORS header in github.com/cilium/cilium

May 10, 2024 GO-2024-2922 +6 more

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3071: Gateway API route matching order contradicts specification in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3074: Cilium leaks information via incorrect ReferenceGrant update logic in Gateway API in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

  GO-2025-3415: DoS in Cilium agent DNS proxy from crafted DNS responses in github.com/cilium/cilium

  GO-2025-3416: Cilium has an information leakage via insecure default Hubble UI CORS header in github.com/cilium/cilium

Apr 11, 2024 GO-2024-2922 +6 more

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3071: Gateway API route matching order contradicts specification in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3074: Cilium leaks information via incorrect ReferenceGrant update logic in Gateway API in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

  GO-2025-3415: DoS in Cilium agent DNS proxy from crafted DNS responses in github.com/cilium/cilium

  GO-2025-3416: Cilium has an information leakage via insecure default Hubble UI CORS header in github.com/cilium/cilium

Mar 26, 2024 GO-2024-2922 +6 more

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3071: Gateway API route matching order contradicts specification in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3074: Cilium leaks information via incorrect ReferenceGrant update logic in Gateway API in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

  GO-2025-3415: DoS in Cilium agent DNS proxy from crafted DNS responses in github.com/cilium/cilium

  GO-2025-3416: Cilium has an information leakage via insecure default Hubble UI CORS header in github.com/cilium/cilium

Mar 13, 2024 GO-2024-2666 +7 more

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3071: Gateway API route matching order contradicts specification in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3074: Cilium leaks information via incorrect ReferenceGrant update logic in Gateway API in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

  GO-2025-3415: DoS in Cilium agent DNS proxy from crafted DNS responses in github.com/cilium/cilium

  GO-2025-3416: Cilium has an information leakage via insecure default Hubble UI CORS header in github.com/cilium/cilium

Feb 14, 2024 GO-2024-2653 +10 more

  GO-2024-2653: HTTP policy bypass in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2657: Unencrypted traffic between nodes with WireGuard in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3071: Gateway API route matching order contradicts specification in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3074: Cilium leaks information via incorrect ReferenceGrant update logic in Gateway API in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

  GO-2025-3415: DoS in Cilium agent DNS proxy from crafted DNS responses in github.com/cilium/cilium

  GO-2025-3416: Cilium has an information leakage via insecure default Hubble UI CORS header in github.com/cilium/cilium

Jan 31, 2024 GO-2024-2653 +10 more

  GO-2024-2653: HTTP policy bypass in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2657: Unencrypted traffic between nodes with WireGuard in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3071: Gateway API route matching order contradicts specification in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3074: Cilium leaks information via incorrect ReferenceGrant update logic in Gateway API in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

  GO-2025-3415: DoS in Cilium agent DNS proxy from crafted DNS responses in github.com/cilium/cilium

  GO-2025-3416: Cilium has an information leakage via insecure default Hubble UI CORS header in github.com/cilium/cilium

Changes in this version

+ var ResourcesCell = cell.Module("k8s-resources", "Clustermesh-apiserver Kubernetes resources", ...)

+ func CiliumSlimEndpointResource(lc cell.Lifecycle, cs client.Clientset, opts ...func(*metav1.ListOptions)) (resource.Resource[*types.CiliumEndpoint], error)

+ type Resources struct

+ CiliumIdentities resource.Resource[*cilium_api_v2.CiliumIdentity]

+ CiliumNodes resource.Resource[*cilium_api_v2.CiliumNode]

+ CiliumSlimEndpoints resource.Resource[*types.CiliumEndpoint]

+ Endpoints resource.Resource[*k8s.Endpoints]

+ Services resource.Resource[*slim_corev1.Service]