CLEANSTART-2026-VT52246 Security fixes in linkerd2 26.1.4-r0

Package linkerd2 version 26.1.4-r0 fixes 7 vulnerabilities: ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-hr2v-4r36-88hr, CVE-2026-35469, CVE-2026-33186...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: k8sgpt, cilium, consul-k8s, kubescape, k9s, kwok, cilium-cli, k3s, skaffold, trivy-operator, vcluster, docker-cli-buildx, dynamic-localpv-provisioner, kots, helm, eksctl, zarf, falcoctl, linkerd2, hubble, teleport, istio, infinispan-operator,...

GHSA-9F94-5G5W-GF6R vulnerabilities

Vulnerabilities for packages: zed, ztunnel, lychee, efs-utils, linkerd-extension-init, pixi, deno, linkerd2, parseable, zizmor, linkerd-network-validator, rustup, rustls-ffi, wasmcloud, ntpd-rs, cargo-audit, linkerd2-proxy, qdrant, py3-xet-core, nushell, buck2, zellij...

GHSA-394X-VWMW-CRM3 vulnerabilities

Vulnerabilities for packages: zed, ztunnel, lychee, efs-utils, linkerd-extension-init, pixi, deno, linkerd2, parseable, zizmor, linkerd-network-validator, rustup, rustls-ffi, wasmcloud, ntpd-rs, cargo-audit, linkerd2-proxy, qdrant, py3-xet-core, nushell, buck2...

GHSA-9H84-QMV7-982P vulnerabilities

Vulnerabilities for packages: k8sgpt, cert-manager-cmctl, kubescape, k9s, helm-set-status, cilium-cli, helm-push, flux-source-controller, helm-docs, trivy-operator, kots, flux-helm-controller, eksctl, tw, zarf, flux, linkerd2, cerbos, nova, istio, helm-mapkubeapis, trivy, chart-testing,...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: helm-docs, teleport, trivy-operator, kots, helm-operator, k8ssandra-client, envoy-gateway, trivy-operator-fips, flux-helm-controller-fips, helm-mapkubeapis, istio, k8sgpt, flux-helm-controller, flux, cerbos, cilium-cli, kuma, helm-push,...

GHSA-QX2V-8332-M4FV vulnerabilities

Vulnerabilities for packages: shadowsocks-rust, efs-utils, linkerd-extension-init, pixi, zola, jujutsu, mdbook, linkerd2, buck2, uv, linkerd2-proxy...