{"action":"Upgrade github.com/projectcalico/calico to 3.20.5 or later.","affected":[{"fixed":"3.22.2","introduced":"3.22.0"},{"fixed":"3.21.5","introduced":"3.21.0"},{"fixed":"3.20.5","introduced":"0"}],"component":"github.com/projectcalico/calico","cve_ids":["CVE-2022-28224"],"ecosystem":"Go","epss":0.00615,"exploited":false,"fixed_versions":["3.22.2","3.21.5","3.20.5"],"ghsa_id":"GHSA-9394-xfq9-6qrp","id":"tcs_01M5KF4QXZNC1SS5Q7Z2RPZ0MD","modified_at":"2026-08-07T08:12:05.645787966Z","published_at":"2022-06-07T00:00:33Z","references":["https://osv.dev/vulnerability/GHSA-9394-xfq9-6qrp","https://nvd.nist.gov/vuln/detail/CVE-2022-28224","https://github.com/projectcalico/calico","https://www.tigera.io/security-bulletins-tta-2022-001"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-9394-xfq9-6qrp","url":"https://osv.dev/vulnerability/GHSA-9394-xfq9-6qrp"}],"summary":"Calico vulnerable to pod route hijacking"}