projectcalico has 5 CVEs on record between 2022 and 2026. The median CVSS is 6.3 (medium). None have a confirmed exploitation report. Most affected products: github.com/projectcalico/calico (4), github.com/projectcalico/calicoctl/v3 (1).
CVEs per month
Last 12 months, by publish date
1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.3
- Publish → KEV
- —
- Last 90 days
- 0 prev 1
Products
- github.com/projectcalico/calico 4
- github.com/projectcalico/calicoctl/v3 1
5
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
CVE-2026-6720HighCalico Inserts Sensitive Information into Log File41CVE-2023-41378High· 7.5Calico Typha denial of service vulnerability41CVE-2024-33522Medium· 6.7Calico privilege escalation vulnerability37CVE-2020-13597Medium· 6.0Exposure of Sensitive Information to an Unauthorized Actor and Insertion of Sensitive Information Into Sent Data in Calico33CVE-2022-28224Medium· 5.5Calico vulnerable to pod route hijacking30
projectcalico vulnerabilities
CVEs affecting projectcalico, newest first. Open any entry for full detail, references, and exploit status.
5 CVEsRSS
CVE-2026-6720HighCalico Inserts Sensitive Information into Log File
Calico Inserts Sensitive Information into Log File
▾ Twilightprojectcalico · github.com/projectcalico/calicoctl/v3EPSS 0.22%via OSV
CVE-2024-33522Medium· 6.7Calico privilege escalation vulnerability
Calico privilege escalation vulnerability
▾ Sunlitprojectcalico · github.com/projectcalico/calicoEPSS 0.22%via OSV
CVE-2023-41378High· 7.5Calico Typha denial of service vulnerability
Calico Typha denial of service vulnerability
▾ Twilightprojectcalico · github.com/projectcalico/calicoEPSS 0.72%via OSV
CVE-2022-28224Medium· 5.5Calico vulnerable to pod route hijacking
Calico vulnerable to pod route hijacking
▾ Sunlitprojectcalico · github.com/projectcalico/calicoEPSS 0.59%via OSV
CVE-2020-13597Medium· 6.0Exposure of Sensitive Information to an Unauthorized Actor and Insertion of Sensitive Information Into Sent Data in Calico
Exposure of Sensitive Information to an Unauthorized Actor and Insertion of Sensitive Information Into Sent Data in Calico
▾ Sunlitprojectcalico · github.com/projectcalico/calicoEPSS 0.90%via OSV