{"id":"GO-2025-4222","revision":"17665c599afe41008567cac3504da64e","records":[{"revision":"17665c599afe41008567cac3504da64e","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-4222","aliases":["CVE-2025-67499","GHSA-jv3w-x3r3-g6rm"],"title":"CNA Plugins Portmap nftables backend can intercept non-local traffic in github.com/containernetworking/plugins","description":"CNA Plugins Portmap nftables backend can intercept non-local traffic in github.com/containernetworking/plugins","state":0,"publishedAt":"2025-12-15T20:15:46+00:00","modifiedAt":"2026-02-04T04:13:28.578143+00:00","affected":[{"ecosystem":"Go","name":"github.com/containernetworking/plugins","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"1.6.0"},{"kind":"fixed","version":"1.9.0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/containernetworking/plugins/security/advisories/GHSA-jv3w-x3r3-g6rm","https://nvd.nist.gov/vuln/detail/CVE-2025-67499","https://github.com/containernetworking/plugins/commit/9b3772e1a7abf93cbb7c6526a28bc0d27b830e02","https://github.com/containernetworking/plugins/pull/1210","https://github.com/containernetworking/plugins/releases/tag/v1.9.0"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-4222","license":"OSV · upstream source license applies","key":"osv:GO-2025-4222","identifiers":["GO-2025-4222","CVE-2025-67499","GHSA-jv3w-x3r3-g6rm"]},"retained":false,"historicalAffected":[]}],"coverage":[]}