{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"antrea.io/antrea","cve_ids":["CVE-2026-25804"],"ecosystem":"Go","epss":0.00492,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-86x4-wp9f-wrr9","id":"tcs_01M5KGDW7PJH5JTDYKBA235XQM","modified_at":"2026-02-19T20:41:02.251456Z","published_at":"2026-02-17T18:09:06Z","references":["https://osv.dev/vulnerability/GO-2026-4461","https://github.com/antrea-io/antrea/security/advisories/GHSA-86x4-wp9f-wrr9","https://nvd.nist.gov/vuln/detail/CVE-2026-25804","https://gist.github.com/antoninbas/c429cc3e5bb8479ba7ff38fd6fde59d9","https://github.com/antrea-io/antrea/blob/main/docs/antrea-network-policy.md","https://github.com/antrea-io/antrea/commit/86c4b6010f3be536866f339b632621c23d7186fa","https://github.com/antrea-io/antrea/pull/7496"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GO-2026-4461","url":"https://osv.dev/vulnerability/GO-2026-4461"},{"source":"nvd","source_id":"CVE-2026-25804","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25804"}],"summary":"Antrea has invalid enforcement order for network policy rules caused by integer overflow in antrea.io/antrea"}