{"action":"Upgrade github.com/containernetworking/plugins to 1.9.0 or later.","affected":[{"fixed":"1.9.0","introduced":"1.6.0"}],"component":"github.com/containernetworking/plugins","cve_ids":["CVE-2025-67499"],"ecosystem":"Go","epss":0.00139,"exploited":false,"fixed_versions":["1.9.0"],"ghsa_id":"GHSA-jv3w-x3r3-g6rm","id":"tcs_01M5KFESRP3EMEVDJGMXZ2ZS76","modified_at":"2026-09-10T03:50:31.936882536Z","published_at":"2025-12-09T17:18:59Z","references":["https://osv.dev/vulnerability/GHSA-jv3w-x3r3-g6rm","https://github.com/containernetworking/plugins/security/advisories/GHSA-jv3w-x3r3-g6rm","https://nvd.nist.gov/vuln/detail/CVE-2025-67499","https://github.com/containernetworking/plugins/pull/1210","https://github.com/containernetworking/plugins/commit/9b3772e1a7abf93cbb7c6526a28bc0d27b830e02","https://github.com/containernetworking/plugins","https://github.com/containernetworking/plugins/releases/tag/v1.9.0","https://pkg.go.dev/vuln/GO-2026-4222"],"severity":{"label":"medium","score":6.6},"sources":[{"source":"osv","source_id":"GHSA-jv3w-x3r3-g6rm","url":"https://osv.dev/vulnerability/GHSA-jv3w-x3r3-g6rm"}],"summary":"CNA Plugins Portmap nftables backend can intercept non-local traffic"}