VulertSecurity VulertSecurity

Vulnerability Database · Go · github.com/cilium/cilium · Version

github.com/cilium/cilium v1.20.3

v1.20.3 is affected by 27 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 0 High 1 Medium 8 Low 1 Unrated 17

All github.com/cilium/cilium versions & vulnerabilities → Source repository Search the database for this package →
Released 15 Oct 2026 Status latest release Licence Apache-2.0 Also known from other sources 0 Newer releases 300 Database updated 23/Oct/2026

Release and licence data published by the Go module proxy. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

github.com/cilium/cilium v1.20.3 vulnerabilities

27 vulnerabilities cover github.com/cilium/cilium v1.20.3. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
CVE-2026-41520: Cilium Exposes Sensitive WireGuard Private Key in Debug Archive 7.9 high 1.17.15 25 Apr 2026
CVE-2024-42488: Policy bypass for Host Firewall policy due to race condition in Cilium agent 6.8 medium 1.14.14 15 Aug 2024
CVE-2024-28249: Unencrypted traffic between nodes when using IPsec and L7 policies in Cilium 6.1 medium 1.13.13 18 Mar 2024
CVE-2026-56742: Cilium HTTPRoute Namespace Bypass Vulnerability 5.9 medium 1.17.17 24 Sep 2026
CVE-2026-33726: Cilium L7 Proxy Bypass of Kubernetes NetworkPolicy for Same-Node Traffic 5.4 medium 1.17.14 26 Mar 2026
CVE-2023-30851: Potential HTTP policy bypass in Cilium 5.3 medium 1.11.16 22 May 2023
CVE-2023-27593: Cilium Agent Container Access to Host via `hostPath` Mount 4.4 medium 1.11.15 17 Mar 2023
Vulnerability in Cilium Network Policies with Namespace Label Selectors 4.3 medium 1.10.14 30 Aug 2022
CVE-2023-27594: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium 4.2 medium 1.11.15 17 Mar 2023
Cilium host policy bypass in endpoint-routes mode with dual-stack 3.3 low 1.10.13 15 Jul 2022
CVE-2026-56742: Cilium HTTPRoutes Vulnerability Allowing Cross-Namespace Traffic Redirection N/A unrated 1.17.17 01 Oct 2026
CVE-2026-49445: Cilium Vulnerable to Sensitive Information Disclosure and Cluster Disruption N/A unrated 1.17.14 07 Jul 2026
CVE-2026-53935: Cilium Package Cross-Namespace Service Traffic Hijacking Vulnerability N/A unrated 1.17.16 07 Jul 2026
CVE-2026-41520: Cilium Exposes Sensitive Information in Debug Archive N/A unrated 1.17.15 25 Jun 2026
CVE-2026-33726: Cilium L7 Proxy Bypass of Kubernetes NetworkPolicy for Same-Node Traffic N/A unrated 1.17.14 26 Mar 2026
CVE-2025-64715: Cilium Unrestricted Egress Traffic Due to Misconfigured Policies N/A unrated 1.16.17 15 Dec 2025
Vulnerability in github.com/cilium/cilium N/A unrated 1.10.14 21 Aug 2024
CVE-2022-29178: Privilege Escalation in Cilium in github.com/cilium/cilium N/A unrated 1.9.16 21 Aug 2024
CVE-2022-29179: Improper Privilege Management in Cilium N/A unrated 1.9.16 21 Aug 2024
CVE-2023-39347: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium N/A unrated 1.12.14 21 Aug 2024
CVE-2023-41332: Denial of Service Vulnerability in github.com/cilium/cilium N/A unrated 1.12.14 21 Aug 2024
CVE-2023-41333: Cilium Vulnerable to Bypass of Namespace Restrictions N/A unrated 1.12.14 21 Aug 2024
CVE-2023-30851: Potential HTTP policy bypass in github.com/cilium/cilium N/A unrated 1.11.16 20 Aug 2024
CVE-2023-27594: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium N/A unrated 1.11.15 20 Aug 2024
CVE-2024-42488: Policy bypass for Host Firewall policy in github.com/cilium/cilium N/A unrated 1.14.14 16 Aug 2024
CVE-2024-28860: Insecure IPsec transparent encryption in github.com/cilium/cilium N/A unrated 1.13.14 16 Apr 2024
CVE-2024-28249: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium N/A unrated 1.13.13 22 Mar 2024

Looking for another version, or everything Vulert holds for github.com/cilium/cilium?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/cilium/cilium v1.20.3

Is github.com/cilium/cilium v1.20.3 vulnerable?

Yes. 27 vulnerabilities in the Vulert database cover github.com/cilium/cilium v1.20.3: 0 critical, 1 high, 8 medium and 1 low, plus 17 not yet rated. Each entry above names the fixed version to move to.

Is v1.20.3 the latest release of github.com/cilium/cilium?

Yes. v1.20.3 is the current release, published 15 Oct 2026. Staying on the current line is what keeps you inside the publisher's fixes.

How do I monitor github.com/cilium/cilium for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/cilium/cilium version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.