https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:50:53 +0000 https://cve.radiocsirt.org/vuln/bit-cilium-2025-32793 <p><strong>Affected:</strong> Bitnami: cilium</p> <p>Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.15.0 to 1.15.15, 1.16.0 to 1.16.8, and 1.17.0 to 1.17.2, are vulnerable when using Wireguard transparent encryption in a Cilium cluster, packets that originate from a terminating endpoint can leave the source node without encryption due to a race condition in how traffic is processed by Cilium. This issue has been patched in versions 1.15.16, 1.16.9, and 1.17.3. There are no workarounds available for this issue.</p> <p><strong>Affected:</strong> Bitnami: cilium</p> <p>Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.15.0 to 1.15.15, 1.16.0 to 1.16.8, and 1.17.0 to 1.17.2, are vulnerable when using Wireguard transparent encryption in a Cilium cluster, packets that originate from a terminating endpoint can leave the source node without encryption due to a race condition in how traffic is processed by Cilium. This issue has been patched in versions 1.15.16, 1.16.9, and 1.17.3. There are no workarounds available for this issue.</p> https://cve.radiocsirt.org/vuln/bit-cilium-2025-32793 https://cve.radiocsirt.org/vuln/euvd-2026-232185 EUVD-2026-232185 https://cve.radiocsirt.org/vuln/euvd-2026-232185 https://cve.radiocsirt.org/vuln/fkie_cve-2025-32793 <p>Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.15.0 to 1.15.15, 1.16.0 to 1.16.8, and 1.17.0 to 1.17.2, are vulnerable when using Wireguard transparent encryption in a Cilium cluster, packets that originate from a terminating endpoint can leave the source node without encryption due to a race condition in how traffic is processed by Cilium. This issue has been patched in versions 1.15.16, 1.16.9, and 1.17.3. There are no workarounds available for this issue.</p> <p>Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.15.0 to 1.15.15, 1.16.0 to 1.16.8, and 1.17.0 to 1.17.2, are vulnerable when using Wireguard transparent encryption in a Cilium cluster, packets that originate from a terminating endpoint can leave the source node without encryption due to a race condition in how traffic is processed by Cilium. This issue has been patched in versions 1.15.16, 1.16.9, and 1.17.3. There are no workarounds available for this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-32793 https://cve.radiocsirt.org/vuln/ghsa-5vxx-c285-pcq4 <p><strong>Affected:</strong> Go: github.com/cilium/cilium</p> <p>### Impact</p> <p>When using [Wireguard transparent encryption](https://docs.cilium.io/en/stable/security/network/encryption-wireguard/#encryption-wg) in a Cilium cluster, packets that originate from a terminating endpoint can leave the source node without encryption due to a race condition in how traffic is processed by Cilium.</p> <p>### Patches</p> <p>This issue has been patched in https://github.com/cilium/cilium/pull/38592.</p> <p>This issue affects:</p> <p>- Cilium v1.15 between v1.15.0 and v1.15.15 inclusive - Cilium v1.16 between v1.16.0 and v1.16.8 inclusive - Cilium v1.17 between v1.17.0 and v1.17.2 inclusive</p> <p>This issue is fixed in:</p> <p>- Cilium v1.15.16 - Cilium v1.16.9 - Cilium v1.17.3</p> <p>### Workarounds</p> <p>There is no workaround to this issue.</p> <p>### Acknowledgements</p> <p>The Cilium community has worked together with members of Isovalent to prepare these mitigations. Special thanks to @gandro and @pippolo84 for reporting this issue and to @julianwiedmann for the patch.</p> <p>### For more information</p> <p>If you think you have found a vulnerability affecting Cilium, we strongly encourage you to report it to our security mailing list at [security@cilium.io](mailto:security@cilium.io). This is a private mailing list for the Cilium security team, and your report will be treated as top priority.</p> <p><strong>Affected:</strong> Go: github.com/cilium/cilium</p> <p>### Impact</p> <p>When using [Wireguard transparent encryption](https://docs.cilium.io/en/stable/security/network/encryption-wireguard/#encryption-wg) in a Cilium cluster, packets that originate from a terminating endpoint can leave the source node without encryption due to a race condition in how traffic is processed by Cilium.</p> <p>### Patches</p> <p>This issue has been patched in https://github.com/cilium/cilium/pull/38592.</p> <p>This issue affects:</p> <p>- Cilium v1.15 between v1.15.0 and v1.15.15 inclusive - Cilium v1.16 between v1.16.0 and v1.16.8 inclusive - Cilium v1.17 between v1.17.0 and v1.17.2 inclusive</p> <p>This issue is fixed in:</p> <p>- Cilium v1.15.16 - Cilium v1.16.9 - Cilium v1.17.3</p> <p>### Workarounds</p> <p>There is no workaround to this issue.</p> <p>### Acknowledgements</p> <p>The Cilium community has worked together with members of Isovalent to prepare these mitigations. Special thanks to @gandro and @pippolo84 for reporting this issue and to @julianwiedmann for the patch.</p> <p>### For more information</p> <p>If you think you have found a vulnerability affecting Cilium, we strongly encourage you to report it to our security mailing list at [security@cilium.io](mailto:security@cilium.io). This is a private mailing list for the Cilium security team, and your report will be treated as top priority.</p> https://cve.radiocsirt.org/vuln/ghsa-5vxx-c285-pcq4 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15017-1 <p>govulncheck-vulndb-0.0.20250422T181640-1.1 on GA media</p> <p>govulncheck-vulndb-0.0.20250422T181640-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15017-1