Vulnerability Database · Go · Package report
github.com/cilium/cilium: vulnerability history, versions and safety
github.com/cilium/cilium is a package in the Go ecosystem. Vulert records 76 vulnerabilities for it across 120 releases, from May 2021 to Oct 2026. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.
No patched version yet — these are the ones to plan around.
See the unfixed vulnerabilities →No published version shipped hostile code.
Vulert verdict on github.com/cilium/cilium v1.20.3 i
Updated on 23 Oct 2026
Action needed: v1.20.3 has 27 known vulnerabilities, but every one of them has a fix. Upgrade to the version listed below and you are clear.
- Security Unfixed issues
- Maintenance Sustainable
- Popularity Key ecosystem project
- Community Moderate
What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →
- Current release v1.20.3 — affected i
- Vulnerabilities on record 76 over 5 years · 16 in the last year i
- Latest disclosure 01 Oct 2026 i
- Highest CVSS 9.2 i
- With no published fix 1 i
- Stars 25,690 i
- OpenSSF scorecard 6/10 i
- Last release this month i
- Licence Apache-2.0 i
Version list, release dates, licence and dependants published by the Go module proxy, refreshed 22 Oct 2026. Licence information is not legal advice.
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Versions
Which versions are affected
Every version Vulert tracks for github.com/cilium/cilium, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.
- v1.21.0-pre.3.0.20261022091946-88967491152b 22 Oct 2026
- v1.21.0-pre.3.0.20261021194349-910d938ab6cb 21 Oct 2026
- v1.21.0-pre.3.0.20261021112828-9a9b74516a1b 21 Oct 2026
- v1.21.0-pre.3.0.20261021084821-67b3c74df912 21 Oct 2026
- v1.21.0-pre.3.0.20261021081733-dc8135f41674 21 Oct 2026
- v1.21.0-pre.3.0.20261020182801-19c45cf58afc 20 Oct 2026
- v1.21.0-pre.3.0.20261020182025-9ffa837895b9 20 Oct 2026
- v1.21.0-pre.3.0.20261020153018-203af97c1e56 20 Oct 2026
- v1.21.0-pre.3.0.20261020115800-eaf2c4719efa 20 Oct 2026
- v1.21.0-pre.3.0.20261020101807-f8013dcb9813 20 Oct 2026
- v1.21.0-pre.3.0.20261020081546-e66a9d36cfce 20 Oct 2026
- v1.21.0-pre.3.0.20261019172116-835550fbe4b3 19 Oct 2026
- v1.21.0-pre.3.0.20261019142812-dc5a1b220153 19 Oct 2026
- v1.21.0-pre.3.0.20261019124738-0d72d63bc96e 19 Oct 2026
- v1.21.0-pre.3.0.20261019103314-469455b1ec53 19 Oct 2026
- v1.21.0-pre.3.0.20261018164441-f70d0db4e1f2 18 Oct 2026
- v1.21.0-pre.3.0.20261016174433-d5d5df67dd32 16 Oct 2026
- v1.21.0-pre.3.0.20261016155410-a5397eb6eca4 16 Oct 2026
- v1.21.0-pre.3.0.20261016123426-09a79ea21db2 16 Oct 2026
- v1.21.0-pre.3.0.20261016101325-7b31bcb3b34b 16 Oct 2026
- v1.21.0-pre.3.0.20261015234910-524be0bfddee 15 Oct 2026
- v1.21.0-pre.3.0.20261015200539-6351d66aaba4 15 Oct 2026
- v1.21.0-pre.3.0.20261015183848-23e9a029e43a 15 Oct 2026
- v1.21.0-pre.3.0.20261015155119-6c6b4a8fb22b 15 Oct 2026
- v1.21.0-pre.3.0.20261015153715-1c29878066b6 15 Oct 2026
- v1.21.0-pre.3.0.20261015145302-264351990ad8 15 Oct 2026
- v1.21.0-pre.3.0.20261015141250-82d7ccddb116 15 Oct 2026
- v1.20.3 15 Oct 2026
- v1.19.9 15 Oct 2026
- v1.18.15 15 Oct 2026
- v1.21.0-pre.3.0.20261015130631-782ae9a17002 15 Oct 2026
- v1.21.0-pre.3.0.20261015070250-1bc59e623115 15 Oct 2026
- v1.21.0-pre.3.0.20261014224714-721c7923381a 14 Oct 2026
- v1.21.0-pre.3.0.20261014174136-a5ea5f2e41b1 14 Oct 2026
- v1.21.0-pre.3.0.20261014161913-a7175afe0053 14 Oct 2026
- v1.21.0-pre.3.0.20261014133401-de7049ef2dea 14 Oct 2026
- v1.21.0-pre.3.0.20261014075452-c6fe3c6f5e6f 14 Oct 2026
- v1.21.0-pre.3.0.20261014050526-b7dcb62d26c4 14 Oct 2026
- v1.21.0-pre.3.0.20261014002108-ecc0925acdda 14 Oct 2026
- v1.21.0-pre.3.0.20261013162153-0997fdf84c36 13 Oct 2026
- v1.21.0-pre.3.0.20261013135045-290bd7a825e5 13 Oct 2026
- v1.21.0-pre.3.0.20261013125706-66d11ca69228 13 Oct 2026
- v1.21.0-pre.3.0.20261013100002-522f21742793 13 Oct 2026
- v1.21.0-pre.3.0.20261013085435-7e128a095c8d 13 Oct 2026
- v1.21.0-pre.3.0.20261012210553-7c11a349512b 12 Oct 2026
- v1.21.0-pre.3.0.20261012070424-bb489e45c0a9 12 Oct 2026
- v1.21.0-pre.3.0.20261011205457-a07d344d3906 11 Oct 2026
- v1.21.0-pre.3.0.20261011170305-e4a81960aff4 11 Oct 2026
- v1.21.0-pre.3.0.20261011143308-21b1d0697c29 11 Oct 2026
- v1.21.0-pre.3.0.20261010103441-c973d50b1622 10 Oct 2026
- v1.21.0-pre.3.0.20261009141709-3030fdd7325c 09 Oct 2026
- v1.21.0-pre.3.0.20261009112331-f0cdf8225e9d 09 Oct 2026
- v1.21.0-pre.3.0.20261009025155-5e2c777f6dbf 09 Oct 2026
- v1.21.0-pre.3.0.20261008214604-a4d2185babe0 08 Oct 2026
- v1.21.0-pre.3.0.20261008120845-eb6a6617d9ce 08 Oct 2026
- v1.21.0-pre.3.0.20261006222418-558694281c4e 06 Oct 2026
- v1.21.0-pre.3.0.20261005153955-757dbcac2922 05 Oct 2026
- v1.21.0-pre.3.0.20261004160521-1c4cb5752da3 04 Oct 2026
- v1.21.0-pre.3.0.20261002225340-60e8bd1230bd 02 Oct 2026
- v1.21.0-pre.3 02 Oct 2026
- v1.21.0-pre.3.0.20261002183326-850ec5093d0b 02 Oct 2026
- v1.21.0-pre.2.0.20261001200208-bf3e61f25703 01 Oct 2026
- v1.21.0-pre.2.0.20260930181254-5aba27c8d19d 30 Sep 2026
- v1.21.0-pre.1.0.20260930084221-ee333352c6f8 30 Sep 2026
- v1.21.0-pre.2.0.20260929122500-e7747e57ae32 29 Sep 2026
- v1.21.0-pre.2.0.20260928224119-d66929b1dfc7 28 Sep 2026
- v1.21.0-pre.2.0.20260928104207-84222dca7aff 28 Sep 2026
- v1.21.0-pre.2.0.20260927204813-99c3d25e601f 27 Sep 2026
- v1.21.0-pre.2.0.20260925235146-9a3c26f57f39 25 Sep 2026
- v1.21.0-pre.2.0.20260924204328-4fd7531b37df 24 Sep 2026
- v1.21.0-pre.2.0.20260923172058-7c4e5469a2fc 23 Sep 2026
- v1.21.0-pre.2.0.20260922201833-bc38713ac709 22 Sep 2026
- v1.21.0-pre.2.0.20260922152741-f7c5b662142b 22 Sep 2026
- v1.21.0-pre.1.0.20260922115758-111227efab8b 22 Sep 2026
- v1.21.0-pre.2.0.20260922115758-f7768fd603e5 22 Sep 2026
- v1.21.0-pre.2.0.20260922112112-4ee3c51886e1 22 Sep 2026
- v1.21.0-pre.2.0.20260921223434-4f1afc8fb7fc 21 Sep 2026
- v1.21.0-pre.2.0.20260921192239-e27ce9ee66da 21 Sep 2026
- v1.21.0-pre.2.0.20260920160619-913af846188d 20 Sep 2026
- v1.21.0-pre.2.0.20260920144804-875d30938323 20 Sep 2026
- v1.21.0-pre.2.0.20260920124925-eafcc155ccfd 20 Sep 2026
- v1.21.0-pre.2.0.20260920101042-45e20e5d4343 20 Sep 2026
- v1.21.0-pre.2.0.20260920082108-b58f0705fe41 20 Sep 2026
- v1.21.0-pre.2.0.20260920024700-50084757c292 20 Sep 2026
- v1.21.0-pre.2.0.20260918214417-f5b8a13d7c89 18 Sep 2026
- v1.21.0-pre.2.0.20260918180852-e34992ad64f1 18 Sep 2026
- v1.21.0-pre.2.0.20260918142137-23d5b1787fe3 18 Sep 2026
- v1.21.0-pre.2.0.20260918130116-f1f5cf329800 18 Sep 2026
- v1.21.0-pre.2.0.20260918104848-4093b0cdb6e2 18 Sep 2026
- v1.21.0-pre.2.0.20260918092209-06aae33071fe 18 Sep 2026
- v1.21.0-pre.2.0.20260917214907-cccadb0e7017 17 Sep 2026
- v1.21.0-pre.2.0.20260917140258-f4b8c2459643 17 Sep 2026
- v1.21.0-pre.2.0.20260916182909-ae54dc211b80 16 Sep 2026
- v1.21.0-pre.2.0.20260916170712-2f1375976d60 16 Sep 2026
- v1.21.0-pre.2.0.20260916145431-9dc608614090 16 Sep 2026
- v1.21.0-pre.2.0.20260916064040-47db9528e4b8 16 Sep 2026
- v1.19.8 15 Sep 2026
- v1.21.0-pre.2.0.20260915201754-9f2e92635f50 15 Sep 2026
- v1.20.2 15 Sep 2026
- v1.21.0-pre.2.0.20260915182922-e7fde29b8e0b 15 Sep 2026
- v1.21.0-pre.2.0.20260915165428-fb408fd92da1 15 Sep 2026
- v1.18.14 15 Sep 2026
- v1.19.8-0.20260915131800-f8905a2e0454 15 Sep 2026
- v1.21.0-pre.2.0.20260914123615-277176d190ab 14 Sep 2026
- v1.21.0-pre.2.0.20260914114408-47b6648ab7bd 14 Sep 2026
- v1.21.0-pre.2.0.20260913212915-c729dee8e087 13 Sep 2026
- v1.21.0-pre.2.0.20260913091640-d0d69ab6374b 13 Sep 2026
- v1.21.0-pre.2.0.20260913020014-bc479651c5b1 13 Sep 2026
- v1.21.0-pre.2.0.20260911194746-573d2bd3e301 11 Sep 2026
- v1.21.0-pre.2.0.20260910175542-6bba81cbe508 10 Sep 2026
- v1.21.0-pre.2.0.20260910065428-e0b4fd0e3b58 10 Sep 2026
- v1.21.0-pre.2.0.20260909230822-6fc6f4d164c7 09 Sep 2026
- v1.21.0-pre.2.0.20260909104151-f19c4cc7b7db 09 Sep 2026
- v1.21.0-pre.2 09 Sep 2026
- v1.21.0-pre.1.0.20260908234813-c3f93518bffe 08 Sep 2026
- v1.21.0-pre.1.0.20260908063156-033eb004fd7a 08 Sep 2026
- v1.21.0-pre.1.0.20260907190135-629ba134d7c1 07 Sep 2026
- v1.21.0-pre.1.0.20260907175452-c975f40357d8 07 Sep 2026
- v1.21.0-pre.1.0.20260907161130-f18f41ee9717 07 Sep 2026
- v1.21.0-pre.1 07 Sep 2026
The newest 120 of 23,598 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.
02 Disclosure history
How often vulnerabilities are recorded
Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 16 of the 76 were recorded in the last 12 months.
03 Vulnerabilities
Recorded vulnerabilities for github.com/cilium/cilium
| Vulnerability | Severity | Fixed version ↓ | Disclosed ↓ |
|---|---|---|---|
| CVE-2026-49445: Cilium Vulnerable to Sensitive Information Disclosure and Cluster Disruption via Local Envoy Admin Socket Access | 9.2 critical | 1.19.2 | 06 Jul 2026 |
| CVE-2022-29178: Privilege Escalation in Cilium via Unix Domain Socket | 8.8 high | 1.11.5 | 24 May 2022 |
| CVE-2024-28860: Insecure IPsec transport encryption in Cilium | 8.0 high | 1.13.14 | 28 Mar 2024 |
| CVE-2024-37307: Cilium Leaks Sensitive Information in cilium-bugtool | 7.9 high | 1.13.17 | 13 Jun 2024 |
| CVE-2026-41520: Cilium Exposes Sensitive WireGuard Private Key in Debug Archive | 7.9 high | 1.17.15 | 25 Apr 2026 |
Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback
Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315
