https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T16:55:29.010544+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-30851 CVE-2023-30851 — Potential HTTP policy bypass when using header rules in Cilium 2026-10-09T16:55:29.026548+00:00

Affected: cilium

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. This issue only impacts users who have a HTTP policy that applies to multiple `toEndpoints` AND have an allow-all rule in place that affects only one of those endpoints. In such cases, a wildcard rule will be appended to the set of HTTP rules, which could cause bypass of HTTP policies. This issue has been patched in Cilium 1.11.16, 1.12.9, and 1.13.2.