CVE-2022-28224
1 advisory.
Go/github.com/projectcalico/calico CVE-2022-28224: medium 5.5, EPSS 0.61%
Calico vulnerable to pod route hijacking
Action: Upgrade github.com/projectcalico/calico to 3.20.5 or later.
go get github.com/projectcalico/calico@v3.22.2go get github.com/projectcalico/calico@v3.21.5go get github.com/projectcalico/calico@v3.20.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.22.0 | 3.22.2 | - |
| 3.21.0 | 3.21.5 | - |
| 0 | 3.20.5 | - |
Fixed versions
| 3.22.2 | 3.21.5 | 3.20.5 |
Sources
- osv: GHSA-9394-xfq9-6qrp
- https://nvd.nist.gov/vuln/detail/CVE-2022-28224
- https://github.com/projectcalico/calico
- https://www.tigera.io/security-bulletins-tta-2022-001
CVE-2022-28224 · published · modified · JSON