Go/github.com/cilium/cilium CVE-2026-56742: medium 5.9, EPSS 0.17%
Cilium: Namespaced HTTPRoutes can redirect traffic to other namespaces
Action: Upgrade github.com/cilium/cilium to 1.17.17 or later.
go get github.com/cilium/cilium@v1.17.17go get github.com/cilium/cilium@v1.19.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.17.17 | - |
| 1.19.0 | 1.19.5 | - |
Fixed versions
| 1.17.17 | 1.19.5 |
Sources
- osv: GHSA-w7c2-w76w-5hmj
- https://github.com/cilium/cilium/security/advisories/GHSA-w7c2-w76w-5hmj
- https://nvd.nist.gov/vuln/detail/CVE-2026-56742
- https://github.com/cilium/cilium/commit/7422068aff67ac77c7dcc57aa5b9240c91333deb
- https://github.com/cilium/cilium/commit/e0b1cef513ff910323f3743e9f3e3d86721e4857
- https://github.com/cilium/cilium/commit/f23929cff682d6ed0dc158070812cb302fc0032b
- https://github.com/cilium/cilium/commit/fd47963ea394d5e8fa4a88c40a79063430c512ca
- https://github.com/cilium/cilium
- https://github.com/cilium/cilium/releases/tag/v1.17.17
- https://github.com/cilium/cilium/releases/tag/v1.18.11
- https://github.com/cilium/cilium/releases/tag/v1.19.5
CVE-2026-56742 · published · modified · JSON