-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
GoGoMiggo AIRoot Cause AnalysisThe vulnerability arises from the Helm chart's Nginx configuration template, which included overly permissive CORS headers by default. The commit patch removes these headers, indicating that their presence in the template was the root cause. Since the vulnerability is in the configuration setup rather than specific functions in the code, the affected component is the Helm template file responsible for generating the Nginx configuration. The high confidence comes from the direct correlation between the removed headers in the patch and the vulnerability description.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/cilium/cilium | go | >= 1.14.0, < 1.14.19 | 1.14.19 |
| github.com/cilium/cilium | go | >= 1.15.0, < 1.15.13 | 1.15.13 |
| github.com/cilium/cilium |
| go |
| >= 1.16.0, < 1.16.6 |
| 1.16.6 |
Ongoing coverage of React2Shell