Affected by GO-2026-4856
and 4 other vulnerabilities
GO-2026-4856: Cilium L7 proxy may bypass Kubernetes NetworkPolicy for same-node traffic in github.com/cilium/cilium
GO-2026-5400: Cillium exposes sensitive information included in the cilium-bugtool debug archive in github.com/cilium/cilium
GO-2026-5905: Cilium vulnerable to sensitive information disclosure and cluster disruption via local Envoy admin socket access in github.com/cilium/cilium
GO-2026-5914: CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation in github.com/cilium/cilium
GO-2026-6367: Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock match in github.com/cilium/cilium
func GetOrPutWith[T any](c *Cache[T], hash uint64, eq func(T) bool, get func() T) T
GetOrPutWith tries to find the object from the cache with the given hash and equality
function. . If not found, [get] is called to construct the object.
type Cache[T any] struct {
// contains filtered or unexported fields
}
Cache is a simple fixed size cache for efficient deduplication of objects.
The underlying array is held onto with a weak pointer to allow GC to collect
it when under memory pressure.
Get a cached object if any. If Get() was called previously with an object equal to [x]
and it is found from the cache then it is returned, otherwise [x] is inserted into
cache.