{"action":"Upgrade github.com/cilium/cilium to 1.11.16 or later.","affected":[{"fixed":"1.11.16","introduced":"0"},{"fixed":"1.12.9","introduced":"1.12.0"},{"fixed":"1.13.2","introduced":"1.13.0"}],"component":"github.com/cilium/cilium","cve_ids":["CVE-2023-30851"],"ecosystem":"Go","epss":0.00655,"exploited":false,"fixed_versions":["1.11.16","1.12.9","1.13.2"],"ghsa_id":"GHSA-2h44-x2wx-49f4","id":"tcs_01M5KES58YWAN0DB2X5WK5HTWV","modified_at":"2026-09-10T03:49:54.485621303Z","published_at":"2023-05-22T20:33:15Z","references":["https://osv.dev/vulnerability/GHSA-2h44-x2wx-49f4","https://github.com/cilium/cilium/security/advisories/GHSA-2h44-x2wx-49f4","https://nvd.nist.gov/vuln/detail/CVE-2023-30851","https://github.com/cilium/cilium","https://github.com/cilium/cilium/releases/tag/v1.11.16","https://github.com/cilium/cilium/releases/tag/v1.12.9","https://github.com/cilium/cilium/releases/tag/v1.13.2"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-2h44-x2wx-49f4","url":"https://osv.dev/vulnerability/GHSA-2h44-x2wx-49f4"}],"summary":"Potential HTTP policy bypass when using header rules in Cilium"}