—
GO-2023-1653
`cilium-cli` disables etcd authorization for clustermesh clusters in github.com/cilium/cilium-cli
Quick fix
GO-2023-1653 — github.com/cilium/cilium-cli: upgrade to the fixed version with the command below.
go get github.com/cilium/cilium-cli@v0.13.2Details
`cilium-cli` disables etcd authorization for clustermesh clusters in github.com/cilium/cilium-cli
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/cilium/cilium-cli
Introduced in:
0Fixed in: 0.13.2Fix
go get github.com/cilium/cilium-cli@v0.13.2References
- https://github.com/cilium/cilium-cli/security/advisories/GHSA-6f27-3p6c-p5jc[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2023-28114[ADVISORY]
- https://github.com/cilium/cilium-cli/commit/fb1427025764e1eebc4a7710d902c4f22cae2610[FIX]
- https://artifacthub.io/packages/helm/cilium/cilium[WEB]
- https://github.com/cilium/cilium-cli/releases/tag/v0.13.2[WEB]