Skip to content

Product

containernetworking github.com/containernetworking/plugins vulnerabilities

2 published CVES affecting containernetworking github.com/containernetworking/plugins, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
0
Medium
1
Low
1
Unscored
0
CISA KEV
0

Latest containernetworking github.com/containernetworking/plugins CVEs

Newest publication first

  1. CVE-2025-67499 CNI Plugins Portmap nftables backend intercepts non-local traffic

    Published
    LowCVSS 3.6 EPSS 0.15%

    The CNI portmap plugin allows containers to emulate opening a host port, forwarding that traffic to the container. Versions 1.6.0 through 1.8.0 inadvertently forward all traffic with the same destination port as the host port when the portmap plugin is configured with the nftable...

  2. CVE-2020-10749 containernetworking/plugins vulnerable to MitM attacks

    Published
    MediumCVSS 6.0 EPSS 2.1%

    A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertiseme...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.