https://seclists.org/oss-sec/2026/q3/86: [CVE quest] Cilium ClusterNetworkPolicy matchExpssions Values silently dropped — 0-day in v1.20.0-pleases, no maintainer sponse in 9 days via GHSA Triage
Published Jul 7, 2026
·Updated
Affected Software
1 affected component
Cilium=1.20.0-pleases
Frequently Asked Questions
1
Are released production versions affected?
The report states that only development snapshots of Cilium are affected and that no released stable versions are affected. Production use of those development snapshots is not expected.
2
Has the issue been independently confirmed?
The provided discussion does not confirm the issue as real. It explicitly raises doubts about the claimed reports and asks whether anyone has investigated and determined that the issue is genuine.