StackRadar

CVE-2025-23047

Medium

Advisory

Published 22 Jan 2025In the index since 8 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3
of 17,781 indexed, latest versions
Container images
5
deployed by those charts
Fix available
1 of 1
affected package

Cilium has an information leakage via insecure default Hubble UI CORS header

Carried by container images the latest versions of 3 of 17,781 indexed charts deploy, on 5 images.

Affected packageAffected versionsFixed inImages
github.com/cilium/ciliumgolangv1.14.1, v1.15.1, v1.15.41.14.19, 1.15.135
OSV records
GHSA-h78m-j95m-5356
Also known as
BIT-cilium-2025-23047, BIT-cilium-operator-2025-23047, BIT-hubble-relay-2025-23047, GO-2025-3416

Charts affected

3 by stars
ChartLatestAffected imagesRadar Score
janus-shieldjanus-shield1.0.01 of 2See more

janus-shield janus-shield 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-23047.

Container imageDigestPackageFixed in
quay.io/cilium/tetragon:v1.1.096fac2482898
github.com/cilium/cilium@v1.15.4
1.15.13

Open the chart page →

2,380
ciliumkubeblocksVerified publisher1.15.12 of 2See more

cilium kubeblocks 1.15.1

2 of the 2 container images this version deploys carry CVE-2025-23047.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.15.1351d6685dc6f
github.com/cilium/cilium@v1.15.1
1.15.13
quay.io/cilium/operator-generic:v1.15.1819c7281f5a4
github.com/cilium/cilium@v1.15.1
1.15.13

Open the chart page →

5,075
spiderpoolkubeblocksVerified publisher1.2.02 of 4See more

spiderpool kubeblocks 1.2.0

2 of the 4 container images this version deploys carry CVE-2025-23047.

Container imageDigestPackageFixed in
ghcr.io/spidernet-io/spiderpool/spiderpool-agent:v1.2.08bb9411e47e0
github.com/cilium/cilium@v1.14.1
1.14.19
ghcr.io/spidernet-io/spiderpool/spiderpool-controller:v1.2.042304e3ed36e
github.com/cilium/cilium@v1.14.1
1.14.19

Open the chart page →

8,378

Container images carrying it

5 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/spidernet-io/spiderpool/spiderpool-agent:v1.2.08bb9411e47e0
github.com/cilium/cilium@v1.14.1
1.14.19
1
ghcr.io/spidernet-io/spiderpool/spiderpool-controller:v1.2.042304e3ed36e
github.com/cilium/cilium@v1.14.1
1.14.19
1
quay.io/cilium/cilium:v1.15.1351d6685dc6f
github.com/cilium/cilium@v1.15.1
1.15.13
1
quay.io/cilium/operator-generic:v1.15.1819c7281f5a4
github.com/cilium/cilium@v1.15.1
1.15.13
1
quay.io/cilium/tetragon:v1.1.096fac2482898
github.com/cilium/cilium@v1.15.4
1.15.13
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.