CLEANSTART-2026-UQ10912 Security fix for CVE-2026-35206 applied in: cert-manager-cmctl-fips 2.4.0-r3, chartmuseum-fips 0.16.5-r0, harbor-scanner-trivy 0.35.1-r1, harbor-scanner-trivy-fips 0.35.1-r1, helm-operator 1.42.1-r0, helm-operator 1.42.2-r0, helm-operator-fips 1.41.1-r2, k8ssandra-client-fips 0.7.0-r5, k8ssandra-client-fips 0.8.10-r1, k8ssandra-client-fips 0.8.11-r0, k8ssandra-client-fips 0.8.9-r0, kubevela 1.10.8-r0, kumactl 2.11.12-r0, kumactl 2.12.9-r0, kumactl 2.13.4-r0, linkerd2 25.12.3-r0, linkerd2 26.1.4-r0, linkerd2 26.4.2, rancher-fleet-agent 0.12.17-r2, rancher-fleet-agent 0.13.13-r1, rancher-fleet-agent 0.14.10-r1, rancher-fleet-agent 0.14.8-r2, rancher-fleet-agent 0.15.4-r3, rancher-fleet-agent 0.15.6-r0, rancher-fleet-agent 0.16.1-r1, tigera-operator 1.41.1-r0

CVE-2026-35206 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: kargo, flux-source-controller-fips, zarf, flux-helm-controller-fips, trivy-fips, helm-docs, flux-helm-controller, flux, envoy-gateway-fips, chartmuseum, cerbos-fips, envoy-gateway, rancher-fleet-fips, flux-source-controller, consul-k8s, linkerd2, harbor,...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: kargo, maru, gatekeeper, ocm-kubernetes-controller-fips, manifest-tool, linkerd2, steampipe, cluster-api-helm-controller-fips, rancher-fleet, k9s, chartmuseum-fips, consul-k8s-fips, headlamp-fips, k9s-fips, conftest-fips, teleport, kube-arangodb, argocd-image-updater...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: eksctl, k8ssandra-client, tw, chart-testing, cerbos, helm-push, chartmuseum, zarf, linkerd2, cilium-cli, istio, k9s, k8sgpt, trivy, flux-source-controller, helm-docs, zot, flux-helm-controller, kargo, cluster-api-helm-controller, envoy-gateway, kots, rancher-fleet,...

GO-2025-3678 vulnerabilities

Vulnerabilities for packages: wasm-pack, sdp-k8s-injector, zed, ntpd-rs, linkerd2-proxy, pixi, wasmtime, rustup, lychee, oranda, samply, xh, parseable, cargo-audit, wash, buck2, rustls-ffi, zola, tealdeer, sqlx, zizmor, wadm, deno, wasmcloud, qdrant, nushell, uv, sccache, atuin,...

CLEANSTART-2026-IN12478 Security fixes in linkerd2 26.4.3-r0

Package linkerd2 version 26.4.3-r0 fixes 11 vulnerabilities: CVE-2026-39820, CVE-2026-42499, CVE-2026-33814, CVE-2026-33811, CVE-2026-39836...

CLEANSTART-2026-VG53890 Security fixes in linkerd2 26.4.2

Package linkerd2 version 26.4.2 fixes 4 vulnerabilities: CVE-2026-35469, CVE-2026-35206, ghsa-hr2v-4r36-88hr, ghsa-pc3f-x583-g7j2...

CLEANSTART-2026-DJ16607 Security fixes in linkerd2 25.12.3-r0

Package linkerd2 version 25.12.3-r0 fixes 17 vulnerabilities: CVE-2026-35469, CVE-2026-33186, CVE-2026-35206, CVE-2025-68121, CVE-2025-61726...

CLEANSTART-2026-ME29225 Security fixes in linkerd2 26.2.1-r0

Package linkerd2 version 26.2.1-r0 fixes 2 vulnerabilities: CVE-2026-27141, CVE-2026-27141...

CLEANSTART-2026-VP07288 Security fixes in linkerd2 26.3.3-r0

Package linkerd2 version 26.3.3-r0 fixes 1 vulnerabilities: ghsa-mh2q-q3fh-2475...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: kubevela-fips, dagger, kargo, newrelic-infrastructure-agent, fuse-overlayfs-snapshotter, packer-fips, gatekeeper, k3s, manifest-tool, linkerd2, steampipe, datadog-agent, cluster-api-helm-controller-fips, harvester-fips, k9s, chartmuseum-fips, docker, consul-k8s-fips,...

CLEANSTART-2026-AH59738 Security fixes for CVE-2026-35469, ghsa-hr2v-4r36-88hr, ghsa-pc3f-x583-g7j2 applied in versions: 26.4.2

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HI64288 Security fixes for CVE-2026-35469, ghsa-hr2v-4r36-88hr, ghsa-pc3f-x583-g7j2 applied in versions: 26.4.2

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QX43073 Security fixes for CVE-2026-29181, CVE-2026-33186, CVE-2026-35469, ghsa-hr2v-4r36-88hr, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2 applied in versions: 26.1.4-r0, 26.3.3-r0

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UJ59341 Security fixes for CVE-2026-27141, CVE-2026-35469, ghsa-hr2v-4r36-88hr, ghsa-pc3f-x583-g7j2 applied in versions: 26.2.1-r0, 26.4.2

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WV75091 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 25.12.3-r0, 25.12.3-r1

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OX51942 Security fixes for CVE-2026-29181, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, ghsa-hr2v-4r36-88hr, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2 applied in versions: 26.1.4-r0, 26.1.4-r1

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-82J2-J2CH-GFR8 vulnerabilities

Vulnerabilities for packages: asciinema, sdp-k8s-injector, xh, wasmcloud, sccache, ztunnel, rye, rustup, wasm-pack, linkerd2, lychee, qdrant, tealdeer, deno, ntpd-rs, mise, lakekeeper, linkerd2-cni-plugin, linkerd-network-validator, samply, uv, shadowsocks-rust, garage, atuin, kdash, ztunnel-fips...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: sonobuoy, gitlab-kas, kpt, eksctl, k8ssandra-client, argo-rollouts, verticadb-operator, docker-cli-buildx, hubble, teleport, cilium, emissary, zarf, redis-operator, k3s, linkerd2, cilium-cli, istio, k9s, k8sgpt, dynamic-localpv-provisioner, consul-k8s, rancher-agent,...

GHSA-CQ8V-F236-94QC vulnerabilities

Vulnerabilities for packages: vector, sdp-k8s-injector, xh, ntpd-rs, yazi, zed, wizer, linkerd2-proxy, pixi, netavark, wasmtime, just, lychee, pgcat, rustup, mdbook, parseable, cargo-audit, ruff, samply, starship, linkerd2, efs-utils, hurl, py3-xet-core, buck2, zola, sqlx, zizmor,...