GO-2022-0959 | Vulnetix

GO-2022-0959 PUBLISHED

Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

Affected Products

Vendor	Product	Versions
github.com	cilium/cilium	0, 1.11.0, 0

Timeline

Aug 21, 2024 CVE Published
Feb 4, 2026 CVE Updated

References

https://github.com/cilium/cilium/security/advisories/GHSA-pfhr-pccp-hwmh advisory
https://github.com/cilium/cilium/releases/tag/v1.11.8 fix
https://github.com/cilium/cilium/releases/tag/v1.12.1 fix
https://github.com/cilium/cilium/releases/tag/v1.10.14 fix

Open in Interactive Console →