GHSA-6W6G-HM98-MHGM vulnerabilities

Vulnerabilities for packages: vector, apollo-router, shadowsocks-rust, komodo, sccache, linkerd2-proxy, ntpd-rs...

GHSA-6W6G-HM98-MHGM vulnerabilities

Vulnerabilities for packages: ntpd-rs, shadowsocks-rust, vector, linkerd2-proxy, sccache...

GHSA-5J98-2G5X-46V6 vulnerabilities

Vulnerabilities for packages: ntpd-rs, shadowsocks-rust, vector, linkerd2-proxy, sccache...

GHSA-6F2X-V7Q7-M7M5 vulnerabilities

Vulnerabilities for packages: ntpd-rs, shadowsocks-rust, vector, linkerd2-proxy, sccache...

CLEANSTART-2026-UQ10912 Security fix for CVE-2026-35206 applied in: cert-manager-cmctl-fips 2.4.0-r3, chartmuseum-fips 0.16.5-r0, harbor-scanner-trivy 0.35.1-r1, harbor-scanner-trivy-fips 0.35.1-r1, helm-operator 1.42.1-r0, helm-operator 1.42.2-r0, helm-operator-fips 1.41.1-r2, k8ssandra-client-fips 0.7.0-r5, k8ssandra-client-fips 0.8.10-r1, k8ssandra-client-fips 0.8.11-r0, k8ssandra-client-fips 0.8.9-r0, kubevela 1.10.8-r0, kumactl 2.11.12-r0, kumactl 2.12.9-r0, kumactl 2.13.4-r0, linkerd2 25.12.3-r0, linkerd2 26.1.4-r0, linkerd2 26.4.2, rancher-fleet-agent 0.12.17-r2, rancher-fleet-agent 0.13.13-r1, rancher-fleet-agent 0.14.10-r1, rancher-fleet-agent 0.14.8-r2, rancher-fleet-agent 0.15.4-r3, rancher-fleet-agent 0.15.6-r0, rancher-fleet-agent 0.16.1-r1, tigera-operator 1.41.1-r0

CVE-2026-35206 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AA09584 Security fix for GHSA-hr2v-4r36-88hr applied in: cert-manager-cmctl-fips 2.4.0-r3, chartmuseum-fips 0.16.5-r0, helm-operator 1.42.2-r0, helm-operator-fips 1.41.1-r2, k8ssandra-client-fips 0.8.10-r1, k8ssandra-client-fips 0.8.11-r0, kubevela 1.10.8-r0, linkerd2 26.1.4-r0, linkerd2 26.4.2, tigera-operator 1.41.1-r0

GHSA-hr2v-4r36-88hr affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: k9s, cerbos-fips, chart-testing, envoy-gateway-fips, helm-docs, rancher-fleet, helm-operator, helm-push, trivy, flux-source-controller, flux, k8ssandra-client-fips, zarf, istio, flux-helm-controller-fips, kots, eksctl, linkerd2, k8sgpt, flux-source-controller-fips,...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: rancher-fleet, helm-push, kyverno-notation-aws-fips, gogatekeeper, zarf, helm-exporter-fips, kots, eksctl, gitlab-operator-fips, argocd-image-updater, chaos-mesh-fips, maru, vcluster, commercial-kyverno, argo-cd-fips, cloudbeat, consul-k8s, cluster-api-helm-controlle...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: helm-docs, istio, zot, rancher-fleet, helm-operator, trivy, helm-push, cert-manager-cmctl, k8ssandra-client, zarf, cluster-api-helm-controller, cerbos, chartmuseum, pluto, k9s, flux-source-controller, cilium-cli, rancher-helm, flux-helm-controller, envoy-gateway, tw,...

GO-2025-3678 vulnerabilities

Vulnerabilities for packages: atuin, linkerd2-proxy, deno, zed, samply, qdrant, wasm-pack, rustup, xh, wash, zizmor, parseable, lychee, ntpd-rs, wadm, sdp-k8s-injector, pixi, shadowsocks-rust, uv, cargo-audit, tealdeer, linkerd-extension-init, nushell, oranda, wasmcloud, rye, wasmtime, zola,...

CLEANSTART-2026-VG53890 Security fixes in linkerd2 26.4.2

Package linkerd2 version 26.4.2 fixes 4 vulnerabilities: CVE-2026-35469, CVE-2026-35206, ghsa-hr2v-4r36-88hr, ghsa-pc3f-x583-g7j2...

CLEANSTART-2026-DJ16607 Security fixes in linkerd2 25.12.3-r0

Package linkerd2 version 25.12.3-r0 fixes 17 vulnerabilities: CVE-2026-35469, CVE-2026-33186, CVE-2026-35206, CVE-2025-68121, CVE-2025-61726...

CLEANSTART-2026-VP07288 Security fixes in linkerd2 26.3.3-r0

Package linkerd2 version 26.3.3-r0 fixes 1 vulnerabilities: ghsa-mh2q-q3fh-2475...

CLEANSTART-2026-ME29225 Security fixes in linkerd2 26.2.1-r0

Package linkerd2 version 26.2.1-r0 fixes 2 vulnerabilities: CVE-2026-27141, CVE-2026-27141...

CLEANSTART-2026-IN12478 Security fixes in linkerd2 26.4.3-r0

Package linkerd2 version 26.4.3-r0 fixes 11 vulnerabilities: CVE-2026-39820, CVE-2026-42499, CVE-2026-33814, CVE-2026-33811, CVE-2026-39836...

PT-2026-86063

Package linkerd2 version 26.3.3-r0 fixes 1 vulnerabilities: ghsa-mh2q-q3fh-2475...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: helm-push, buildkitd, scorecard, zarf, helm-exporter-fips, harvester, docker-compose, kots, spegel, chainctl-fips, neuvector-fips, eksctl, chaos-mesh-fips, neuvector-scanner, falco-no-driver, newrelic-infrastructure-agent-fips, syft, cloudbeat, consul-k8s,...

CLEANSTART-2026-AH59738 Security fixes for CVE-2026-35469, ghsa-hr2v-4r36-88hr, ghsa-pc3f-x583-g7j2 applied in versions: 26.4.2

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HI64288 Security fixes for CVE-2026-35469, ghsa-hr2v-4r36-88hr, ghsa-pc3f-x583-g7j2 applied in versions: 26.4.2

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QX43073 Security fixes for CVE-2026-29181, CVE-2026-33186, CVE-2026-35469, ghsa-hr2v-4r36-88hr, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2 applied in versions: 26.1.4-r0, 26.3.3-r0

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...