github.com/cloudnativelabs/kube-router vulnerabilities (Go)

3 vulnerabilities.

• github.com/cloudnativelabs/kube-router Go kube-router: GoBGP gRPC Admin Port Exposed on Node Primary IP Without Authentication, Allowing Cluster-Wide BGP Route Injection GHSA-v5mh-h5hx-7v92 Fix available 6.3 MediumMay 6, 2026
• github.com/cloudnativelabs/kube-router Go kube-router: BGP Peer Passwords Exposed in Logs at Verbose Logging Level GHSA-fcmh-qfxc-w685 4.1 MediumApril 8, 2026
• github.com/cloudnativelabs/kube-router Go Kube-router Proxy Module Blindly Trusts ExternalIPs/LoadBalancer IPs Enabling Cluster-Wide Traffic Hijacking and DNS DoS CVE-2026-32254 Fix available 7.1 HighMarch 17, 2026