GO-2025-3678 vulnerabilities

Vulnerabilities for packages: shadowsocks-rust, zed, buck2, kdash, rustls-ffi, wash, wasm-pack, wasmcloud, sqlx, ntpd-rs, uv, sccache, rye, qdrant, oranda, wadm, cargo-audit, xh, parseable, lychee, linkerd2-proxy, pixi, deno, zola, atuin, samply, tealdeer, zizmor, nushell, wasmtime, rustup,...

CLEANSTART-2026-VT52246 Security fixes in linkerd2 26.1.4-r0

Package linkerd2 version 26.1.4-r0 fixes 7 vulnerabilities: ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-hr2v-4r36-88hr, CVE-2026-35469, CVE-2026-33186...

GHSA-82J2-J2CH-GFR8 vulnerabilities

Vulnerabilities for packages: sdp-k8s-injector, fnm, sccache, linkerd2-proxy, nushell, zola, wasmtime, zellij, kdash, xh, cargo-audit, samply, asciinema, linkerd2, atuin, rustls-openssl-client, lakekeeper, pixi, rustup, shadowsocks-rust, qdrant, linkerd2-cni-plugin, lychee, sentry-cli, uv,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: falcoctl, argo-rollouts, dynamic-localpv-provisioner, eksctl, envoy-gateway, rancher-fleet, sonobuoy, argo-cd, kubeflow-pipelines, teleport, hubble, consul-k8s, trivy-operator, k8sgpt, argo-workflows, kube-arangodb, trivy, kubevela, postgres-operator,...

GHSA-XGP8-3HG3-C2MH vulnerabilities

Vulnerabilities for packages: shadowsocks-rust, buck2, kdash, wasm-pack, wasmcloud, sqlx, ntpd-rs, linkerd-network-validator, uv, rye, qdrant, sccache, cargo-audit, xh, parseable, lychee, linkerd2-proxy, pixi, py3-xet-core, zellij, deno, zola, ztunnel, linkerd2, atuin, samply, tealdeer, zizmor,...

GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: shadowsocks-rust, buck2, kdash, wasm-pack, wasmcloud, sqlx, ntpd-rs, linkerd-network-validator, uv, rye, qdrant, sccache, cargo-audit, xh, parseable, lychee, linkerd2-proxy, pixi, py3-xet-core, zellij, deno, zola, ztunnel, linkerd2, atuin, samply, tealdeer, zizmor,...

GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: sdp-k8s-injector, fnm, sccache, linkerd2-proxy, zola, wasmtime, zellij, kdash, xh, cargo-audit, samply, asciinema, linkerd2, atuin, lakekeeper, pixi, rustup, shadowsocks-rust, qdrant, linkerd2-cni-plugin, lychee, sentry-cli, uv, wasm-pack, ztunnel-fips, garage, komod...

GHSA-XGP8-3HG3-C2MH vulnerabilities

Vulnerabilities for packages: sdp-k8s-injector, fnm, sccache, linkerd2-proxy, zola, wasmtime, zellij, kdash, xh, cargo-audit, samply, asciinema, linkerd2, atuin, lakekeeper, pixi, rustup, shadowsocks-rust, qdrant, linkerd2-cni-plugin, lychee, sentry-cli, uv, wasm-pack, ztunnel-fips, garage, komod...

GHSA-CQ8V-F236-94QC vulnerabilities

Vulnerabilities for packages: fish, shadowsocks-rust, yazi, zed, rav1e, buck2, kdash, wasmcloud, netavark, sqlx, ntpd-rs, biome, mountpoint-s3, hurl, linkerd-network-validator, pgcat, uutils, vector, uv, qdrant, rye, sccache, wadm, cargo-audit, xh, parseable, lychee, linkerd2-proxy, pixi, just,...

GHSA-CQ8V-F236-94QC vulnerabilities

Vulnerabilities for packages: valkey-ldap, zellij, sdp-k8s-injector, bootc, fnm, sccache, linkerd2-proxy, nushell, zola, wasmtime, jujutsu, kdash, worktrunk, cargo-audit, samply, hurl, asciinema, atuin, linkerd2, wasmcloud, ruff, xh, apollo-router, fish, just, chaos-tproxy, pixi, rustup,...

GHSA-9F94-5G5W-GF6R vulnerabilities

Vulnerabilities for packages: zed, buck2, wasmcloud, rustls-ffi, ntpd-rs, linkerd-network-validator, qdrant, cargo-audit, parseable, lychee, linkerd2-proxy, pixi, py3-xet-core, efs-utils, deno, zellij, ztunnel, linkerd2, zizmor, nushell, rustup, linkerd-extension-init...

GHSA-394X-VWMW-CRM3 vulnerabilities

Vulnerabilities for packages: zed, buck2, wasmcloud, rustls-ffi, ntpd-rs, linkerd-network-validator, qdrant, cargo-audit, parseable, lychee, linkerd2-proxy, pixi, py3-xet-core, efs-utils, deno, ztunnel, linkerd2, zizmor, nushell, rustup, linkerd-extension-init...

CVE-2026-25541 vulnerabilities

Vulnerabilities for packages: shadowsocks-rust, yazi, zed, buck2, kdash, wash, netavark, wasmcloud, topgrade, sqlx, ntpd-rs, mountpoint-s3, linkerd-network-validator, pgcat, uv, qdrant, oranda, sccache, wadm, cargo-audit, linkerd-await, xh, parseable, lychee, linkerd2-proxy, pixi, py3-xet-core,...

GHSA-434X-W66G-QW3R vulnerabilities

Vulnerabilities for packages: shadowsocks-rust, yazi, zed, buck2, kdash, wash, netavark, wasmcloud, topgrade, sqlx, ntpd-rs, mountpoint-s3, linkerd-network-validator, pgcat, uv, qdrant, oranda, sccache, wadm, cargo-audit, linkerd-await, xh, parseable, lychee, linkerd2-proxy, pixi, py3-xet-core,...

EUVD-2025-13396

Malicious code in bioql PyPI...

EUVD-2024-38551

Malicious code in bioql PyPI...

SUSE CVE-2025-43915

In Linkerd edge releases before edge-25.2.1, and Buoyant Enterprise for Linkerd releases 2.13.0-2.13.7, 2.14.0-2.14.10, 2.15.0-2.15.7, 2.16.0-2.16.4, and 2.17.0-2.17.1, resource exhaustion can occur for Linkerd proxy metrics...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, eksctl, envoy-gateway, helm-operator, rancher-fleet, flux, chart-testing, helm-set-status, flux-source-controller, trivy-operator, k8sgpt, trivy, zot, nova, kargo, helm-docs, cilium-cli, kots, helm-push, flux-helm-controller, k9s,...

GHSA-9H84-QMV7-982P vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, eksctl, envoy-gateway, helm-operator, rancher-fleet, flux, chart-testing, helm-set-status, flux-source-controller, trivy-operator, k8sgpt, trivy, zot, nova, kargo, helm-docs, cilium-cli, kots, helm-push, flux-helm-controller, k9s,...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: headlamp-fips, kots, eksctl, flux-source-controller, k8ssandra-client, linkerd2-fips, pluto, chartmuseum-fips, helm-push, kargo, cluster-api-helm-controller-fips, teleport, helm-operator-fips, k8ssandra-client-fips, rancher-fleet, cerbos-fips, linkerd2, trivy-operato...