{"action":"Upgrade github.com/cilium/cilium to 1.17.17 or later.","affected":[{"fixed":"1.17.17","introduced":"0"},{"fixed":"1.18.11","introduced":"1.18.0"},{"fixed":"1.19.5","introduced":"1.19.0"}],"component":"github.com/cilium/cilium","cve_ids":["CVE-2026-56742"],"ecosystem":"Go","epss":0.00172,"exploited":false,"fixed_versions":["1.17.17","1.18.11","1.19.5"],"ghsa_id":"GHSA-w7c2-w76w-5hmj","id":"tcs_01M5KGVR0TAMYGWMDGHC7TJZ22","modified_at":"2026-10-07T17:45:13.511612531Z","published_at":"2026-10-01T20:23:38Z","references":["https://osv.dev/vulnerability/GO-2026-6596","https://github.com/cilium/cilium/security/advisories/GHSA-w7c2-w76w-5hmj","https://github.com/cilium/cilium/commit/7422068aff67ac77c7dcc57aa5b9240c91333deb","https://github.com/cilium/cilium/commit/e0b1cef513ff910323f3743e9f3e3d86721e4857","https://github.com/cilium/cilium/commit/f23929cff682d6ed0dc158070812cb302fc0032b","https://github.com/cilium/cilium/commit/fd47963ea394d5e8fa4a88c40a79063430c512ca","https://github.com/cilium/cilium/releases/tag/v1.17.17","https://github.com/cilium/cilium/releases/tag/v1.18.11","https://github.com/cilium/cilium/releases/tag/v1.19.5"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2026-6596","url":"https://osv.dev/vulnerability/GO-2026-6596"}],"summary":"Cilium: Namespaced HTTPRoutes can redirect traffic to other namespaces in github.com/cilium/cilium"}