-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/cilium/cilium | go | = 1.16.0 | 1.16.1 |
| github.com/cilium/cilium | go | >= 1.15.0, < 1.15.8 | 1.15.8 |
GoGoMiggo AIRoot Cause AnalysisThe vulnerability stems from the route sorting logic in SortableRoute.Less() which determines match precedence. The commit diff shows the fix added method matching checks (via getMethod) before header matching checks in the sorting algorithm. The original implementation without this method check caused routes with header matches to be prioritized over method matches, violating the spec's requirement that method matching should precede header matching. The test changes in envoy_virtual_host_test.go demonstrate how method-based routes now get higher priority in the sorted order. The function's role in determining routing precedence and the direct modification to insert method checks make it clearly vulnerable.
Ongoing coverage of React2Shell