{"action":"Upgrade github.com/cilium/cilium to 1.16.8 or later.","affected":[{"fixed":"1.16.8","introduced":"1.16.0"},{"fixed":"1.17.2","introduced":"1.17.0"}],"component":"github.com/cilium/cilium","cve_ids":["CVE-2025-30163"],"ecosystem":"Go","epss":0.0021,"exploited":false,"fixed_versions":["1.16.8","1.17.2"],"ghsa_id":"GHSA-c6pf-2v8j-96mc","id":"tcs_01M5KG7S93K71RDKX6B5QS2XT4","modified_at":"2026-03-03T04:57:14.588260Z","published_at":"2025-03-25T19:38:11Z","references":["https://osv.dev/vulnerability/GO-2025-3561","https://github.com/cilium/cilium/security/advisories/GHSA-c6pf-2v8j-96mc","https://github.com/cilium/cilium/pull/36657","https://docs.cilium.io/en/stable/security/policy/language/#node-based"],"severity":{"label":"medium","score":4.7},"sources":[{"source":"osv","source_id":"GO-2025-3561","url":"https://osv.dev/vulnerability/GO-2025-3561"},{"source":"nvd","source_id":"CVE-2025-30163","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-30163"}],"summary":"Cilium node based network policies may incorrectly allow workload traffic in github.com/cilium/cilium"}