Go/github.com/projectcalico/calico CVE-2024-33522: medium 6.7, EPSS 0.22%
Calico privilege escalation vulnerability
Action: Upgrade github.com/projectcalico/calico to 3.26.5 or later.
go get github.com/projectcalico/calico@v3.26.5go get github.com/projectcalico/calico@v3.27.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.26.5 | - |
| 3.27.0 | 3.27.3 | - |
Fixed versions
| 3.26.5 | 3.27.3 |
Sources
- osv: GHSA-6362-gv4m-53ww
- https://nvd.nist.gov/vuln/detail/CVE-2024-33522
- https://github.com/projectcalico/calico/issues/7981
- https://github.com/projectcalico/calico/pull/8447
- https://github.com/projectcalico/calico/pull/8517
- https://github.com/advisories/GHSA-6362-gv4m-53ww
- https://github.com/projectcalico/calico
- https://pkg.go.dev/vuln/GO-2024-2801
- https://www.tigera.io/security-bulletins-tta-2024-001
CVE-2024-33522 · published · modified · JSON