{"action":"Upgrade github.com/containernetworking/plugins to 1.9.0 or later.","affected":[{"fixed":"1.9.0","introduced":"1.6.0"}],"component":"github.com/containernetworking/plugins","cve_ids":["CVE-2025-67499"],"ecosystem":"Go","epss":0.00139,"exploited":false,"fixed_versions":["1.9.0"],"ghsa_id":"GHSA-jv3w-x3r3-g6rm","id":"tcs_01M5KGCD38J3VMR0AZP42KEPXB","modified_at":"2026-02-04T04:13:28.578143Z","published_at":"2025-12-15T20:15:46Z","references":["https://osv.dev/vulnerability/GO-2025-4222","https://github.com/containernetworking/plugins/security/advisories/GHSA-jv3w-x3r3-g6rm","https://nvd.nist.gov/vuln/detail/CVE-2025-67499","https://github.com/containernetworking/plugins/commit/9b3772e1a7abf93cbb7c6526a28bc0d27b830e02","https://github.com/containernetworking/plugins/pull/1210","https://github.com/containernetworking/plugins/releases/tag/v1.9.0"],"severity":{"label":"low","score":3.6},"sources":[{"source":"osv","source_id":"GO-2025-4222","url":"https://osv.dev/vulnerability/GO-2025-4222"},{"source":"nvd","source_id":"CVE-2025-67499","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-67499"}],"summary":"CNA Plugins Portmap nftables backend can intercept non-local traffic in github.com/containernetworking/plugins"}