---
title: "Security Bulletins"
source: "https://www.tigera.io/security-bulletins/"
---

# Tigera Security Bulletins

The Security Research team at Tigera is constantly evaluating and analyzing new vulnerabilities to assess their impact to our customers. We want to proactively provide actionable information to help you manage risk and make decisions that are right for your business. Our technical advisories are designed to provide you with all the information that you need regarding new vulnerabilities. This page shows the list of all advisories published by Tigera.

 

[Subscribe to these bulletins via RSS](https://www.tigera.io/security-bulletins/feed/)

Title
Reference
Date

### [Calico Tier Authorization Bypass via DeleteCollection](https://www.tigera.io/security-bulletins/tta-2026-006/)

TTA-2026-006,

CVE-2026-41187
2026-Jul-30

### [L7 policy bypass via unnormalized HTTP path matching](https://www.tigera.io/security-bulletins/tta-2026-005/)

TTA-2026-005,

CVE-2026-6540
2026-Jul-30

### [Unauthenticated Go pprof exposure in Calico debug server](https://www.tigera.io/security-bulletins/tta-2026-004/)

TTA-2026-004,

CVE-2026-41186
2026-Jul-30

### [Calicoctl leaks cluster credentials to stderr when verbose logging is enabled](https://www.tigera.io/security-bulletins/tta-2026-003/)

TTA-2026-003,

CVE-2026-6720
2026-May-27

### [ServiceAccount token disclosure via Azure IPAM CNI plugin logs](https://www.tigera.io/security-bulletins/tta-2026-002/)

TTA-2026-002,

CVE-2026-41185
2026-May-27

### [ServiceAccount token disclosure via install-cni container logs](https://www.tigera.io/security-bulletins/tta-2026-001/)

TTA-2026-001,

CVE-2026-41184
2026-May-27

### [Unintended egress traffic allowed on RHEL 9.4](https://www.tigera.io/security-bulletins-tta-2024-002/)

TTA-2024-002
2024-October-17

### [Privilege escalation in Calico CNI install binary](https://www.tigera.io/security-bulletins-tta-2024-001/)

TTA-2024-001,

CVE-2024-33522
2024-April-29

### [Calico Typha hangs during unclean TLS handshake](https://www.tigera.io/security-bulletins-tta-2023-001/)

TTA-2023-001,

CVE-2023-41378
2023-November-6

### [Calico Enterprise & Calico OS are vulnerable to pod route hijacking](https://www.tigera.io/security-bulletins-tta-2022-001/)

TTA-2022-001
2022-June-1

### [Calico Enterprise affected by CVE-2021-44228](https://www.tigera.io/security-bulletins-tta-2021-002/)

TTA-2021-002
2021-December-16

### [Calico Enterprise running Openshift is vulnerable to Privilege Escalation](https://www.tigera.io/security-bulletins-tta-2021-001/)

TTA-2021-001
2021-Sep-1

### [Fixes available for vulnerability in CNI IPv6 route advertisement](https://www.tigera.io/security-bulletins-tta-2020-001/)

TTA-2020-001
2020-June-1

### [CVE-2019-11253 aka Billion Laughs Vulnerability Mitigations](https://www.tigera.io/security-bulletins-tta-2019-003/)

TTA-2019-003
2019-Dec-2

### [Fixes available for vulnerability in VXLAN and IPIP overlay modes](https://www.tigera.io/security-bulletins-tta-2019-002/)

TTA-2019-002
2019-July-1

### [Fixes available for CVE-2019-9946](https://www.tigera.io/security-bulletins-tta-2019-001/)

TTA-2019-001
2019-March-28

### [Calico CNI Logging can expose Kubernetes service account tokens](https://www.tigera.io/security-bulletins-tta-2018-001/)

TTA-2018-001
2018-Nov-13

<!-- plugin=object-cache-pro client=phpredis metric#hits=9049 metric#misses=17 metric#hit-ratio=99.8 metric#bytes=4597989 metric#prefetches=0 metric#store-reads=418 metric#store-writes=22 metric#store-hits=614 metric#store-misses=6 metric#sql-queries=28 metric#ms-total=945.67 metric#ms-cache=67.32 metric#ms-cache-avg=0.1534 metric#ms-cache-ratio=7.1 -->