GO-2025-3678 vulnerabilities

Vulnerabilities for packages: wash, buck2, uv, sccache, rustls-ffi, sqlx, tealdeer, shadowsocks-rust, wasm-pack, qdrant, atuin, zizmor, wadm, samply, kdash, linkerd-extension-init, wasmcloud, wasmtime, zola, rye, parseable, linkerd2-proxy, nushell, pixi, deno, cargo-audit, rustup, oranda, xh,...

CLEANSTART-2026-VT52246 Security fixes in linkerd2 26.1.4-r0

Package linkerd2 version 26.1.4-r0 fixes 7 vulnerabilities: ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-hr2v-4r36-88hr, CVE-2026-35469, CVE-2026-33186...

GHSA-82J2-J2CH-GFR8 vulnerabilities

Vulnerabilities for packages: lychee, zizmor, zola, qdrant, sentry-cli, wasmcloud, xh, rustup, uv, samply, tealdeer, linkerd-extension-init, rustls-openssl-client, fnm, pixi, linkerd-network-validator, sccache, asciinema, sqlx, kdash, ntpd-rs, komodo, ztunnel, berg, lakekeeper, zellij, rye,...

GHSA-XGP8-3HG3-C2MH vulnerabilities

Vulnerabilities for packages: berg, buck2, uv, sccache, sqlx, tealdeer, shadowsocks-rust, wasm-pack, qdrant, atuin, zizmor, ztunnel, samply, py3-xet-core, kdash, linkerd-extension-init, wasmcloud, wasmtime, zola, rye, parseable, zellij, linkerd2-proxy, pixi, deno, cargo-audit, rustup, linkerd2, x...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: falcoctl, envoy-gateway, kubernetes-dashboard-api, argocd-image-updater, kubescape, argo-rollouts, eksctl, gitlab-kas, datadog-agent, kargo, kubernetes, argo-cd, kwok, istio, k9s, argo-workflows, cluster-api, k8sgpt, gitlab-runner, cloudnative-pg, kube-arangodb,...

GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: berg, buck2, uv, sccache, sqlx, tealdeer, shadowsocks-rust, wasm-pack, qdrant, atuin, zizmor, ztunnel, samply, py3-xet-core, kdash, linkerd-extension-init, wasmcloud, wasmtime, zola, rye, parseable, zellij, linkerd2-proxy, pixi, deno, cargo-audit, rustup, linkerd2, x...

GHSA-XGP8-3HG3-C2MH vulnerabilities

Vulnerabilities for packages: lychee, zizmor, zola, qdrant, sentry-cli, wasmcloud, xh, rustup, uv, samply, tealdeer, linkerd-extension-init, fnm, pixi, linkerd-network-validator, sccache, asciinema, sqlx, kdash, ntpd-rs, komodo, ztunnel, berg, lakekeeper, zellij, rye, shadowsocks-rust, cargo-audi...

GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: lychee, zizmor, zola, qdrant, sentry-cli, wasmcloud, xh, rustup, uv, samply, tealdeer, linkerd-extension-init, fnm, pixi, linkerd-network-validator, sccache, asciinema, sqlx, kdash, ntpd-rs, komodo, ztunnel, berg, lakekeeper, zellij, rye, shadowsocks-rust, cargo-audi...

GHSA-CQ8V-F236-94QC vulnerabilities

Vulnerabilities for packages: buck2, berg, sdp-k8s-injector, uv, just, biome, sccache, sqlx, shadowsocks-rust, mdbook, pgcat, vector, atuin, netavark, zizmor, ruff, cargo-c, wadm, samply, py3-xet-core, kdash, mountpoint-s3, wasmcloud, wasmtime, zola, rye, yazi, parseable, starship, zellij,...

GHSA-CQ8V-F236-94QC vulnerabilities

Vulnerabilities for packages: efs-utils, lychee, ruff, cargo-c, yazi, zizmor, zola, valkey-ldap, sentry-cli, biome, pgcat, just, rav1e, wasmcloud, starship, xh, uutils, chaos-tproxy, rustup, wizer, apollo-router, uv, samply, fish, fnm, hurl, pixi, yara-x, guestproxyagent, linkerd-network-validato...

GHSA-9F94-5G5W-GF6R vulnerabilities

Vulnerabilities for packages: buck2, rustls-ffi, qdrant, zizmor, ztunnel, py3-xet-core, linkerd-extension-init, wasmcloud, parseable, zellij, linkerd2-proxy, nushell, pixi, deno, cargo-audit, rustup, efs-utils, linkerd2, ntpd-rs, lychee, zed, linkerd-network-validator...

GHSA-394X-VWMW-CRM3 vulnerabilities

Vulnerabilities for packages: buck2, rustls-ffi, qdrant, zizmor, ztunnel, py3-xet-core, linkerd-extension-init, wasmcloud, parseable, linkerd2-proxy, nushell, pixi, deno, cargo-audit, rustup, efs-utils, linkerd2, ntpd-rs, lychee, zed, linkerd-network-validator...

CVE-2026-25541 vulnerabilities

Vulnerabilities for packages: wash, berg, buck2, sdp-k8s-injector, uv, sccache, sqlx, tealdeer, shadowsocks-rust, mdbook, pgcat, qdrant, atuin, linkerd-await, netavark, topgrade, zizmor, cargo-c, ztunnel, wadm, samply, py3-xet-core, kdash, linkerd-extension-init, geckodriver, mountpoint-s3,...

GHSA-434X-W66G-QW3R vulnerabilities

Vulnerabilities for packages: wash, berg, buck2, sdp-k8s-injector, uv, sccache, sqlx, tealdeer, shadowsocks-rust, mdbook, pgcat, qdrant, atuin, linkerd-await, netavark, topgrade, zizmor, cargo-c, ztunnel, wadm, samply, py3-xet-core, kdash, linkerd-extension-init, geckodriver, mountpoint-s3,...

EUVD-2025-13396

Malicious code in bioql PyPI...

EUVD-2024-38551

Malicious code in bioql PyPI...

SUSE CVE-2025-43915

In Linkerd edge releases before edge-25.2.1, and Buoyant Enterprise for Linkerd releases 2.13.0-2.13.7, 2.14.0-2.14.10, 2.15.0-2.15.7, 2.16.0-2.16.4, and 2.17.0-2.17.1, resource exhaustion can occur for Linkerd proxy metrics...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: helm-set-status, cert-manager-cmctl, envoy-gateway, chart-testing, kubescape, eksctl, helm-operator, kargo, flux-source-controller, flux, helm-docs, istio, k9s, k8sgpt, zot, cerbos, cluster-api-helm-controller, zarf, k8ssandra-client, nova, cilium-cli, pluto,...

GHSA-9H84-QMV7-982P vulnerabilities

Vulnerabilities for packages: helm-set-status, cert-manager-cmctl, envoy-gateway, chart-testing, kubescape, eksctl, helm-operator, kargo, flux-source-controller, flux, helm-docs, istio, k9s, k8sgpt, zot, cerbos, cluster-api-helm-controller, zarf, k8ssandra-client, nova, cilium-cli, pluto,...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl-fips, trivy, kubescape, consul-k8s, cluster-api-helm-controller, pluto-fips, helm-push, envoy-gateway, zarf, chart-testing, trivy-operator-fips, headlamp, zot, headlamp-fips, helm-mapkubeapis, k8ssandra-client, k8ssandra-client-fips, pluto, flux,...