{"action":"Upgrade github.com/cilium/cilium to 1.17.16 or later.","affected":[{"fixed":"1.19.4","introduced":"1.19.0"},{"fixed":"1.18.10","introduced":"1.18.2"},{"fixed":"1.17.16","introduced":"0"}],"component":"github.com/cilium/cilium","cve_ids":["CVE-2026-53935"],"ecosystem":"Go","epss":0.0034,"exploited":false,"fixed_versions":["1.19.4","1.18.10","1.17.16"],"ghsa_id":"GHSA-q6h5-q3q6-f87x","id":"tcs_01M5KFJEFA2EPNP90PYT4B8MH1","modified_at":"2026-09-10T03:51:11.806176116Z","published_at":"2026-07-06T20:45:38Z","references":["https://osv.dev/vulnerability/GHSA-q6h5-q3q6-f87x","https://github.com/cilium/cilium/security/advisories/GHSA-q6h5-q3q6-f87x","https://github.com/cilium/cilium/pull/44512","https://github.com/cilium/cilium/pull/44584","https://github.com/cilium/cilium/pull/44585","https://github.com/cilium/cilium"],"severity":{"label":"medium","score":6.9},"sources":[{"source":"osv","source_id":"GHSA-q6h5-q3q6-f87x","url":"https://osv.dev/vulnerability/GHSA-q6h5-q3q6-f87x"}],"summary":"CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation"}