GO-2025-3678 vulnerabilities

Vulnerabilities for packages: tealdeer, deno, rye, wash, shadowsocks-rust, linkerd2-proxy, xh, sdp-k8s-injector, qdrant, pixi, wasmcloud, uv, wasmtime, cargo-audit, wadm, rustup, zizmor, rustls-ffi, atuin, zola, zed, parseable, sqlx, oranda, samply, sccache, kdash, linkerd-extension-init, buck2,...

CLEANSTART-2026-VT52246 Security fixes in linkerd2 26.1.4-r0

Package linkerd2 version 26.1.4-r0 fixes 7 vulnerabilities: ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-hr2v-4r36-88hr, CVE-2026-35469, CVE-2026-33186...

GHSA-82J2-J2CH-GFR8 vulnerabilities

Vulnerabilities for packages: parseable, sentry-cli, rye, lakekeeper, wasm-pack, ztunnel-fips, linkerd2-proxy, wasmcloud, lychee, linkerd2, qdrant, zizmor, asciinema, kdash, cargo-audit, rustls-openssl-client, sqlx, tealdeer, linkerd-extension-init, py3-xet-core, uv, komodo, deno, garage, nushell...

GHSA-XGP8-3HG3-C2MH vulnerabilities

Vulnerabilities for packages: tealdeer, zellij, deno, rye, py3-xet-core, shadowsocks-rust, linkerd2-proxy, xh, linkerd2, sdp-k8s-injector, qdrant, pixi, wasmcloud, uv, wasmtime, cargo-audit, ztunnel, rustup, zizmor, atuin, zola, parseable, sqlx, linkerd-network-validator, berg, samply, sccache,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, rancher-fleet, envoy-gateway, kubeflow-pipelines, cert-manager-istio-csr, gitlab-kas, helm, k8ssandra-client, k8sgpt-operator, docker-cli-buildx, infinispan-operator, cilium, cloudnative-pg, argocd-image-updater, kargo, istio, hubble,...

GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: tealdeer, zellij, deno, rye, py3-xet-core, shadowsocks-rust, linkerd2-proxy, xh, linkerd2, sdp-k8s-injector, qdrant, pixi, wasmcloud, uv, wasmtime, cargo-audit, ztunnel, rustup, zizmor, atuin, zola, parseable, sqlx, linkerd-network-validator, berg, samply, sccache,...

GHSA-XGP8-3HG3-C2MH vulnerabilities

Vulnerabilities for packages: parseable, sentry-cli, rye, lakekeeper, wasm-pack, ztunnel-fips, linkerd2-proxy, wasmcloud, lychee, linkerd2, qdrant, zizmor, asciinema, kdash, cargo-audit, sqlx, tealdeer, linkerd-extension-init, py3-xet-core, uv, komodo, deno, garage, samply, ztunnel, fnm, ntpd-rs,...

GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: parseable, sentry-cli, rye, lakekeeper, wasm-pack, ztunnel-fips, linkerd2-proxy, wasmcloud, lychee, linkerd2, qdrant, zizmor, asciinema, kdash, cargo-audit, sqlx, tealdeer, linkerd-extension-init, py3-xet-core, uv, komodo, deno, garage, samply, ztunnel, fnm, ntpd-rs,...

GHSA-CQ8V-F236-94QC vulnerabilities

Vulnerabilities for packages: rav1e, hurl, zellij, deno, rye, py3-xet-core, shadowsocks-rust, linkerd2-proxy, xh, yazi, wizer, linkerd2, sdp-k8s-injector, qdrant, pixi, wasmcloud, efs-utils, uv, vector, wasmtime, cargo-audit, wadm, starship, rustup, mountpoint-s3, netavark, zizmor, atuin, biome,...

GHSA-CQ8V-F236-94QC vulnerabilities

Vulnerabilities for packages: parseable, sentry-cli, rye, yara-x, apollo-router, linkerd2-proxy, watchexec, wasmcloud, lychee, linkerd2, qdrant, zizmor, asciinema, bootc, just, wizer, fish, kdash, guestproxyagent, valkey-ldap, cargo-audit, cargo-c, yazi, wadm, jujutsu, typst, sqlx, py3-xet-core,...

GHSA-9F94-5G5W-GF6R vulnerabilities

Vulnerabilities for packages: zellij, deno, py3-xet-core, linkerd2-proxy, linkerd2, qdrant, pixi, wasmcloud, efs-utils, cargo-audit, ztunnel, rustup, zizmor, rustls-ffi, zed, parseable, linkerd-network-validator, linkerd-extension-init, buck2, ntpd-rs, lychee, nushell...

GHSA-394X-VWMW-CRM3 vulnerabilities

Vulnerabilities for packages: deno, py3-xet-core, linkerd2-proxy, linkerd2, qdrant, pixi, wasmcloud, efs-utils, cargo-audit, ztunnel, rustup, zizmor, rustls-ffi, zed, parseable, linkerd-network-validator, linkerd-extension-init, buck2, ntpd-rs, lychee, nushell...

CVE-2026-25541 vulnerabilities

Vulnerabilities for packages: tealdeer, zellij, helix, deno, py3-xet-core, wash, shadowsocks-rust, linkerd2-proxy, xh, yazi, wizer, linkerd2, sdp-k8s-injector, qdrant, pixi, wasmcloud, efs-utils, uv, wasmtime, cargo-audit, wadm, rustup, mountpoint-s3, netavark, zizmor, atuin, linkerd-await, zola,...

GHSA-434X-W66G-QW3R vulnerabilities

Vulnerabilities for packages: tealdeer, zellij, helix, deno, py3-xet-core, wash, shadowsocks-rust, linkerd2-proxy, xh, yazi, wizer, linkerd2, sdp-k8s-injector, qdrant, pixi, wasmcloud, efs-utils, uv, wasmtime, cargo-audit, wadm, rustup, mountpoint-s3, netavark, zizmor, atuin, linkerd-await, zola,...

EUVD-2024-38551

Malicious code in bioql PyPI...

EUVD-2025-13396

Malicious code in bioql PyPI...

SUSE CVE-2025-43915

In Linkerd edge releases before edge-25.2.1, and Buoyant Enterprise for Linkerd releases 2.13.0-2.13.7, 2.14.0-2.14.10, 2.15.0-2.15.7, 2.16.0-2.16.4, and 2.17.0-2.17.1, resource exhaustion can occur for Linkerd proxy metrics...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: rancher-fleet, envoy-gateway, chartmuseum, k8ssandra-client, cert-manager-cmctl, istio, linkerd2, flux, helm-push, helm-operator, headlamp, chart-testing, nova, flux-source-controller, helm-docs, zarf, kots, helm-set-status, eksctl, cilium-cli, trivy, trivy-operator,...

GHSA-9H84-QMV7-982P vulnerabilities

Vulnerabilities for packages: rancher-fleet, envoy-gateway, chartmuseum, k8ssandra-client, cert-manager-cmctl, istio, linkerd2, flux, helm-push, helm-operator, tw, headlamp, chart-testing, nova, flux-source-controller, helm-docs, zarf, kots, helm-set-status, eksctl, cilium-cli, trivy,...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: kargo, cluster-api-helm-controller, headlamp, kuma, linkerd2-fips, helm-push, rancher-fleet, flux-helm-controller-fips, linkerd2, istio, helm-set-status, cilium-cli, k8ssandra-client-fips, envoy-gateway, flux-source-controller, zot, envoy-gateway-fips, trivy,...