GHSA-82J2-J2CH-GFR8 vulnerabilities

Vulnerabilities for packages: pixi, wasmcloud, lychee, rustup, garage, zizmor, tealdeer, linkerd2, zellij, nushell, sqlx, asciinema, cargo-audit, linkerd-extension-init, buck2, linkerd-network-validator, parseable, uv, kdash, berg, linkerd2-cni-plugin, shadowsocks-rust, ztunnel-fips, lakekeeper,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: falcoctl, cert-manager-istio-csr, jitsucom-bulker, vcluster, dynamic-localpv-provisioner, k8ssandra-client, k9s, kube-arangodb, rancher-agent, gitlab-runner, cri-tools, istio, headlamp, kiali, datadog-agent, sonobuoy, envoy-gateway, kargo, kpt,...

GHSA-XGP8-3HG3-C2MH vulnerabilities

Vulnerabilities for packages: linkerd2-proxy, qdrant, rye, linkerd-extension-init, pixi, sccache, py3-xet-core, samply, cargo-audit, lychee, berg, wasm-pack, sqlx, ntpd-rs, shadowsocks-rust, tealdeer, rustup, uv, buck2, zola, parseable, wasmcloud, zellij, linkerd-network-validator, wasmtime,...

GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: linkerd2-proxy, qdrant, rye, linkerd-extension-init, pixi, sccache, py3-xet-core, samply, cargo-audit, lychee, berg, wasm-pack, sqlx, ntpd-rs, shadowsocks-rust, tealdeer, rustup, uv, buck2, zola, parseable, wasmcloud, zellij, linkerd-network-validator, wasmtime,...

GHSA-XGP8-3HG3-C2MH vulnerabilities

Vulnerabilities for packages: pixi, wasmcloud, lychee, rustup, garage, zizmor, tealdeer, linkerd2, zellij, sqlx, asciinema, cargo-audit, linkerd-extension-init, buck2, linkerd-network-validator, parseable, uv, kdash, berg, linkerd2-cni-plugin, shadowsocks-rust, ztunnel-fips, lakekeeper, samply,...

GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: pixi, wasmcloud, lychee, rustup, garage, zizmor, tealdeer, linkerd2, zellij, sqlx, asciinema, cargo-audit, linkerd-extension-init, buck2, linkerd-network-validator, parseable, uv, kdash, berg, linkerd2-cni-plugin, shadowsocks-rust, ztunnel-fips, lakekeeper, samply,...

GHSA-CQ8V-F236-94QC vulnerabilities

Vulnerabilities for packages: linkerd2-proxy, just, rye, vector, cargo-c, deno, zed, pixi, sdp-k8s-injector, yazi, sccache, py3-xet-core, samply, kdash, hurl, cargo-audit, lychee, nushell, uutils, berg, pgcat, sqlx, ntpd-rs, shadowsocks-rust, mdbook, rav1e, fish, rustup, uv, buck2, zola, efs-util...

GHSA-CQ8V-F236-94QC vulnerabilities

Vulnerabilities for packages: fish, vector, hurl, biome, netavark, pixi, wasmcloud, chaos-tproxy, lychee, jujutsu, rustup, zed, mountpoint-s3, garage, zizmor, valkey-ldap, pgcat, linkerd2, sdp-k8s-injector, typst, efs-utils, zellij, nushell, sqlx, asciinema, cargo-audit, cargo-c, buck2,...

GHSA-394X-VWMW-CRM3 vulnerabilities

Vulnerabilities for packages: linkerd2-proxy, qdrant, linkerd-extension-init, deno, zed, pixi, py3-xet-core, nushell, cargo-audit, lychee, ntpd-rs, rustup, buck2, efs-utils, wasmcloud, parseable, linkerd-network-validator, zizmor, linkerd2, ztunnel, rustls-ffi...

GHSA-9F94-5G5W-GF6R vulnerabilities

Vulnerabilities for packages: linkerd2-proxy, qdrant, linkerd-extension-init, deno, zed, pixi, py3-xet-core, nushell, cargo-audit, lychee, ntpd-rs, rustup, buck2, efs-utils, wasmcloud, parseable, zellij, linkerd-network-validator, zizmor, linkerd2, ztunnel, rustls-ffi...

CVE-2026-25541 vulnerabilities

Vulnerabilities for packages: linkerd2-proxy, qdrant, linkerd-extension-init, cargo-c, oranda, deno, zed, pixi, sdp-k8s-injector, yazi, sccache, helix, py3-xet-core, samply, wash, wadm, kdash, nushell, cargo-audit, lychee, topgrade, berg, pgcat, sqlx, ntpd-rs, shadowsocks-rust, mdbook, tealdeer,...

GHSA-434X-W66G-QW3R vulnerabilities

Vulnerabilities for packages: linkerd2-proxy, qdrant, linkerd-extension-init, cargo-c, oranda, deno, zed, pixi, sdp-k8s-injector, yazi, sccache, helix, py3-xet-core, samply, wash, wadm, kdash, nushell, cargo-audit, lychee, topgrade, berg, pgcat, sqlx, ntpd-rs, shadowsocks-rust, mdbook, tealdeer,...

EUVD-2024-38551

Malicious code in bioql PyPI...

EUVD-2025-13396

Malicious code in bioql PyPI...

SUSE CVE-2025-43915

In Linkerd edge releases before edge-25.2.1, and Buoyant Enterprise for Linkerd releases 2.13.0-2.13.7, 2.14.0-2.14.10, 2.15.0-2.15.7, 2.16.0-2.16.4, and 2.17.0-2.17.1, resource exhaustion can occur for Linkerd proxy metrics...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: k8ssandra-client, k9s, kube-arangodb, istio, headlamp, zot, flux-source-controller, helm-mapkubeapis, envoy-gateway, kargo, kots, flux, rancher-fleet, cluster-api-helm-controller, flux-helm-controller, helm-docs, helm-push, kuma, pluto, chartmuseum, kubescape, nova,...

GHSA-9H84-QMV7-982P vulnerabilities

Vulnerabilities for packages: k8ssandra-client, k9s, kube-arangodb, istio, headlamp, zot, flux-source-controller, helm-mapkubeapis, envoy-gateway, kargo, kots, flux, rancher-fleet, cluster-api-helm-controller, flux-helm-controller, helm-docs, helm-push, kuma, pluto, chartmuseum, kubescape, nova,...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: kubescape, k8ssandra-client, chart-testing-fips, kuma, kargo, cerbos-fips, cilium-cli, kots, kube-arangodb-fips, helm-mapkubeapis, eksctl, flux, cert-manager-cmctl-fips, nova-fips, rancher-fleet, cert-manager-fips, k9s, cerbos, flux-helm-controller-fips, pluto-fips,...

CVE-2025-55159 vulnerabilities

Vulnerabilities for packages: linkerd2-proxy, linkerd2, linkerd-extension-init, uv, pixi, buck2, shadowsocks-rust, zola, efs-utils, mdbook...

GHSA-QX2V-8332-M4FV vulnerabilities

Vulnerabilities for packages: linkerd2-proxy, linkerd2, linkerd-extension-init, uv, pixi, buck2, shadowsocks-rust, zola, efs-utils, mdbook...