Go/github.com/projectcalico/calico CVE-2023-41378: high 7.5, EPSS 0.72%
Calico Typha denial of service vulnerability
Action: Upgrade github.com/projectcalico/calico to 3.26.3 or later.
go get github.com/projectcalico/calico@v3.26.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.26.0 | 3.26.3 | - |
| 0 | - | 3.25.1 |
Fixed versions
| 3.26.3 |
Sources
- osv: GHSA-5r5h-q934-cccp
- https://nvd.nist.gov/vuln/detail/CVE-2023-41378
- https://github.com/projectcalico/calico/pull/7908
- https://github.com/projectcalico/calico/pull/7993
- https://github.com/projectcalico/calico/commit/2ebc1f92ecc39332cf1d55ba676d9101af24982f
- https://github.com/projectcalico/calico/commit/ad8bd001e650ec7742ac30e58247e7eef5956125
- https://github.com/projectcalico/calico
- https://www.tigera.io/security-bulletins-tta-2023-001
CVE-2023-41378 · published · modified · JSON