GO-2025-3802 vulnerabilities

Vulnerabilities for packages: k8ssandra-client, cilium-cli, flux-helm-controller-fips, pluto, eksctl, chart-testing-fips, trivy, zot, envoy-gateway-fips, helm-push, zarf, harbor-fips, linkerd2, kots, k8sgpt, kargo, linkerd2-fips, k8ssandra-client-fips, kuma, istio, trivy-operator-fips,...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, eksctl, rancher, gogatekeeper, opentofu-fips, kube-mgmt-fips, envoy-gateway-fips, helm-push, helm-set-status, kots, falcoctl, tigera-operator-fips, kgateway, maru, consul-k8s, oras, k9s-fips, opentofu, argo-cd-fips, chartmuseum-fips,...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: k8ssandra-client, cilium-cli, pluto, eksctl, trivy, zot, helm-push, zarf, linkerd2, kots, k8sgpt, kargo, istio, flux-source-controller, cert-manager-cmctl, envoy-gateway, cerbos, cluster-api-helm-controller, flux-helm-controller, tw, helm-docs, rancher-fleet,...

GO-2025-3678 vulnerabilities

Vulnerabilities for packages: lychee, wasmtime, samply, tealdeer, nushell, linkerd2-proxy, wasmcloud, linkerd-extension-init, wadm, rye, wash, zola, zed, wasm-pack, uv, kdash, zizmor, sqlx, parseable, atuin, sdp-k8s-injector, oranda, deno, rustup, buck2, xh, qdrant, pixi, sccache, cargo-audit,...

CLEANSTART-2026-IN12478 Security fixes in linkerd2 26.4.3-r0

Package linkerd2 version 26.4.3-r0 fixes 11 vulnerabilities: CVE-2026-39820, CVE-2026-42499, CVE-2026-33814, CVE-2026-33811, CVE-2026-39836...

CLEANSTART-2026-VG53890 Security fixes in linkerd2 26.4.2

Package linkerd2 version 26.4.2 fixes 4 vulnerabilities: CVE-2026-35469, CVE-2026-35206, ghsa-hr2v-4r36-88hr, ghsa-pc3f-x583-g7j2...

CLEANSTART-2026-DJ16607 Security fixes in linkerd2 25.12.3-r0

Package linkerd2 version 25.12.3-r0 fixes 17 vulnerabilities: CVE-2026-35469, CVE-2026-33186, CVE-2026-35206, CVE-2025-68121, CVE-2025-61726...

CLEANSTART-2026-ME29225 Security fixes in linkerd2 26.2.1-r0

Package linkerd2 version 26.2.1-r0 fixes 2 vulnerabilities: CVE-2026-27141, CVE-2026-27141...

CLEANSTART-2026-VP07288 Security fixes in linkerd2 26.3.3-r0

Package linkerd2 version 26.3.3-r0 fixes 1 vulnerabilities: ghsa-mh2q-q3fh-2475...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: spegel, dagger, kubescape-server-fips, eksctl, rancher, amazon-ecs-agent, kube-mgmt-fips, envoy-gateway-fips, helm-push, docker-fips, helm-set-status, kots, helmfile, grype-db, tigera-operator-fips, kgateway, consul-k8s, k9s-fips, grype-fips, chartmuseum-fips,...

CLEANSTART-2026-AH59738 Security fixes for CVE-2026-35469, ghsa-hr2v-4r36-88hr, ghsa-pc3f-x583-g7j2 applied in versions: 26.4.2

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HI64288 Security fixes for CVE-2026-35469, ghsa-hr2v-4r36-88hr, ghsa-pc3f-x583-g7j2 applied in versions: 26.4.2

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QX43073 Security fixes for CVE-2026-29181, CVE-2026-33186, CVE-2026-35469, ghsa-hr2v-4r36-88hr, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2 applied in versions: 26.1.4-r0, 26.3.3-r0

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UJ59341 Security fixes for CVE-2026-27141, CVE-2026-35469, ghsa-hr2v-4r36-88hr, ghsa-pc3f-x583-g7j2 applied in versions: 26.2.1-r0, 26.4.2

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WV75091 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 25.12.3-r0, 25.12.3-r1

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OX51942 Security fixes for CVE-2026-29181, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, ghsa-hr2v-4r36-88hr, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2 applied in versions: 26.1.4-r0, 26.1.4-r1

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-82J2-J2CH-GFR8 vulnerabilities

Vulnerabilities for packages: ztunnel-fips, linkerd2-cni-plugin, lychee, wasmtime, samply, tealdeer, linkerd-network-validator, nushell, linkerd2, linkerd2-proxy, wasmcloud, linkerd-extension-init, rye, zola, berg, lakekeeper, wasm-pack, uv, komodo, ztunnel, py3-xet-core, kdash, zizmor, sentry-cl...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, k8ssandra-client, cilium-cli, kubeflow-pipelines, jitsucom-bulker, argo-rollouts, eksctl, infinispan-operator, vcluster, kpt, rancher, kubernetes, gitlab-runner, dynamic-localpv-provisioner, tigera-operator, zarf, linkerd2,...

GHSA-CQ8V-F236-94QC vulnerabilities

Vulnerabilities for packages: lychee, wasmtime, samply, linkerd-network-validator, nushell, hurl, rav1e, linkerd2, fish, linkerd2-proxy, wasmcloud, uutils, wadm, rye, wizer, zola, berg, zed, starship, yazi, pgcat, uv, netavark, ruff, py3-xet-core, cargo-c, kdash, zizmor, sqlx, parseable, atuin,...

GHSA-CQ8V-F236-94QC vulnerabilities

Vulnerabilities for packages: lychee, wasmtime, samply, linkerd-network-validator, nushell, hurl, rav1e, linkerd2, fish, linkerd2-proxy, wasmcloud, uutils, wadm, rye, virtiofsd, wizer, berg, zola, zed, starship, yazi, pgcat, uv, netavark, komodo, ruff, bootc, cargo-c, py3-xet-core, kdash, zizmor,...