Affected by GO-2026-4856
and 3 other vulnerabilities
GO-2026-4856: Cilium L7 proxy may bypass Kubernetes NetworkPolicy for same-node traffic in github.com/cilium/cilium
GO-2026-5400: Cillium exposes sensitive information included in the cilium-bugtool debug archive in github.com/cilium/cilium
GO-2026-5905: Cilium vulnerable to sensitive information disclosure and cluster disruption via local Envoy admin socket access in github.com/cilium/cilium
GO-2026-5914: CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation in github.com/cilium/cilium
MustCompile wraps go-version.NewConstraint, panicing when an error is
returns (this occurs when the constraint cannot be parsed).
It is intended to be use similar to re.MustCompile, to ensure unparseable
constraints are caught in testing.
Affected by 
Documentation
¶
Source Files