Skip to content
OpenAdvisories

Package · Go

github.com/neuvector/neuvector

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2025-66001

    NeuVector OpenID Connect is vulnerable to man-in-the-middle (MITM)

    NeuVector supports login authentication through OpenID Connect. However, the TLS verification (which verifies the remote server's authenticity and integrity) for OpenID Connect is not enforced by default. As a result this may expose the system to man-in-the-m…

    SUSE NeuVector github.com/neuvector/neuvector Go
  • High 8.6
    CVE-2025-54470

    NeuVector telemetry sender is vulnerable to MITM and DoS

    This vulnerability affects NeuVector deployments only when the Report anonymous cluster data option is enabled. When this option is enabled, NeuVector sends anonymous telemetry data to the telemetry server. In affected versions, NeuVector does not enforce TLS…

    SUSE NeuVector github.com/neuvector/neuvector Go