cloudnativelabs/kube-router Security Advisories | GitStock

medium2026-05-06

kube-router: GoBGP gRPC Admin Port Exposed on Node Primary IP Without Authentication, Allowing Cluster-Wide BGP Route Injection

GHSA-v5mh-h5hx-7v92

medium2026-04-08

kube-router: BGP Peer Passwords Exposed in Logs at Verbose Logging Level

GHSA-fcmh-qfxc-w685

high2026-03-17

Kube-router Proxy Module Blindly Trusts ExternalIPs/LoadBalancer IPs Enabling Cluster-Wide Traffic Hijacking and DNS DoS

GHSA-phqm-jgc3-qf8g · CVE-2026-32254