GHSA-3wwx-63fv-pfq6: github.com/cilium/cilium fixed in 1.15.10 and 1.14.16

GHSA-3wwx-63fv-pfq6 PUBLISHED CVSS 4 MEDIUM

Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present

Record from GitHub Advisory Database · Published October 21, 2024

github.com/cilium/cilium is fixed in 1.15.10 and 1.14.16 (Go Modules)

Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

Package	Ecosystem	Fixed in
github.com/cilium/cilium	Go Modules	1.15.10, 1.14.16
cilium-1.14	Chainguard	1.14.19-r34
cilium-fips-1.15	Chainguard	1.15.10-r0
hubble-ui	Wolfi	0.13.1-r7
cilium-1.15	Wolfi	1.15.19-r3
hubble-ui-backend	Chainguard	0.13.1-r7
hubble-ui	Chainguard	0.13.1-r7
cilium-fips-1.14	Chainguard	1.14.16-r0
cilium-1.15	Chainguard	1.15.19-r3
hubble-ui-backend-fips	Chainguard	0.13.1-r7
cilium-1.14	Wolfi	1.14.19-r34

Risk scores

CVSS 3.1

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N

Affected products

Vendor	Product	Versions
chainguard	cilium-1.14	0
chainguard	cilium-fips-1.15	0
wolfi	hubble-ui	0
wolfi	cilium-1.15	0
github.com	cilium/cilium	1.14.0, 1.15.0
chainguard	hubble-ui-backend	0
chainguard	hubble-ui	0
chainguard	cilium-fips-1.14	0
chainguard	cilium-1.15	0
chainguard	hubble-ui-backend-fips	0
wolfi	cilium-1.14	0

Timeline

Oct 21, 2024 CVE Published
Apr 30, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-3wwx-63fv-pfq6
vulnetix vdb fixes GHSA-3wwx-63fv-pfq6

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-3wwx-63fv-pfq6/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →