{"action":"Upgrade github.com/cilium/ciliumCilium to 1.18.11 or later.","affected":[{"fixed":"1.18.11","introduced":"1.18.0"}],"component":"github.com/cilium/ciliumCilium","cve_ids":["CVE-2026-56742"],"ecosystem":"Go","epss":0.00172,"exploited":false,"fixed_versions":["1.18.11"],"ghsa_id":"GHSA-w7c2-w76w-5hmj","id":"tcs_01M5KFQCYCVRDR10DV7268R2EM","modified_at":"2026-10-01T20:56:11.816067258Z","published_at":"2026-09-24T19:38:39Z","references":["https://osv.dev/vulnerability/GHSA-w7c2-w76w-5hmj","https://github.com/cilium/cilium/security/advisories/GHSA-w7c2-w76w-5hmj","https://nvd.nist.gov/vuln/detail/CVE-2026-56742","https://github.com/cilium/cilium/commit/7422068aff67ac77c7dcc57aa5b9240c91333deb","https://github.com/cilium/cilium/commit/e0b1cef513ff910323f3743e9f3e3d86721e4857","https://github.com/cilium/cilium/commit/f23929cff682d6ed0dc158070812cb302fc0032b","https://github.com/cilium/cilium/commit/fd47963ea394d5e8fa4a88c40a79063430c512ca","https://github.com/cilium/cilium","https://github.com/cilium/cilium/releases/tag/v1.17.17","https://github.com/cilium/cilium/releases/tag/v1.18.11","https://github.com/cilium/cilium/releases/tag/v1.19.5"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-w7c2-w76w-5hmj#Go/github.com/cilium/ciliumCilium","url":"https://osv.dev/vulnerability/GHSA-w7c2-w76w-5hmj"}],"summary":"Cilium: Namespaced HTTPRoutes can redirect traffic to other namespaces"}