GO-2025-3678 vulnerabilities

Vulnerabilities for packages: wadm, atuin, buck2, ntpd-rs, oranda, qdrant, wash, pixi, nushell, wasmtime, parseable, rustls-ffi, tealdeer, uv, lychee, wasm-pack, xh, zed, sqlx, shadowsocks-rust, samply, rustup, sdp-k8s-injector, kdash, sccache, rye, wasmcloud, zola, zizmor, cargo-audit,...

CLEANSTART-2026-VT52246 Security fixes in linkerd2 26.1.4-r0

Package linkerd2 version 26.1.4-r0 fixes 7 vulnerabilities: ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-hr2v-4r36-88hr, CVE-2026-35469, CVE-2026-33186...

GHSA-82J2-J2CH-GFR8 vulnerabilities

Vulnerabilities for packages: linkerd2, buck2, qdrant, ztunnel-fips, atuin, lakekeeper, linkerd2-proxy, samply, cargo-audit, asciinema, kdash, rye, tealdeer, pixi, shadowsocks-rust, fnm, mise, sdp-k8s-injector, rustup, nushell, zola, rustls-openssl-client, sqlx, linkerd-extension-init, parseable,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: consul-k8s, cilium, hubble, kubevela, eksctl, gitlab-kas, sonobuoy, postgres-operator, vcluster, headlamp, k3s, kots, docker-cli-buildx, argo-rollouts, istio, k8sgpt, kiali, aws-node-termination-handler, cert-manager-istio-csr, kubernetes, linkerd2,...

GHSA-XGP8-3HG3-C2MH vulnerabilities

Vulnerabilities for packages: atuin, buck2, ntpd-rs, qdrant, pixi, linkerd2, wasmtime, ztunnel, parseable, tealdeer, uv, lychee, wasm-pack, xh, py3-xet-core, sqlx, shadowsocks-rust, samply, rustup, linkerd-network-validator, sdp-k8s-injector, kdash, berg, sccache, zellij, rye, wasmcloud, zola,...

GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: atuin, buck2, ntpd-rs, qdrant, pixi, linkerd2, wasmtime, ztunnel, parseable, tealdeer, uv, lychee, wasm-pack, xh, py3-xet-core, sqlx, shadowsocks-rust, samply, rustup, linkerd-network-validator, sdp-k8s-injector, kdash, berg, sccache, zellij, rye, wasmcloud, zola,...

GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: linkerd2, buck2, qdrant, ztunnel-fips, atuin, lakekeeper, linkerd2-proxy, samply, cargo-audit, asciinema, kdash, rye, tealdeer, pixi, shadowsocks-rust, fnm, mise, sdp-k8s-injector, rustup, zola, sqlx, linkerd-extension-init, parseable, zizmor,...

GHSA-XGP8-3HG3-C2MH vulnerabilities

Vulnerabilities for packages: linkerd2, buck2, qdrant, ztunnel-fips, atuin, lakekeeper, linkerd2-proxy, samply, cargo-audit, asciinema, kdash, rye, tealdeer, pixi, shadowsocks-rust, fnm, mise, sdp-k8s-injector, rustup, zola, sqlx, linkerd-extension-init, parseable, zizmor,...

GHSA-CQ8V-F236-94QC vulnerabilities

Vulnerabilities for packages: wadm, just, atuin, buck2, ntpd-rs, mdbook, hurl, pixi, biome, mountpoint-s3, linkerd2, uutils, wizer, nushell, wasmtime, yazi, parseable, uv, rav1e, lychee, pgcat, netavark, xh, zed, efs-utils, py3-xet-core, sqlx, shadowsocks-rust, fish, samply,...

GHSA-CQ8V-F236-94QC vulnerabilities

Vulnerabilities for packages: linkerd2, buck2, netavark, ruff, typst, atuin, biome, mdbook, starship, guestproxyagent, linkerd2-proxy, samply, apollo-router, asciinema, cargo-audit, kdash, rye, virtiofsd, mountpoint-s3, pixi, shadowsocks-rust, watchexec, vector, fnm, mise, chaos-tproxy,...

GHSA-9F94-5G5W-GF6R vulnerabilities

Vulnerabilities for packages: qdrant, buck2, ntpd-rs, pixi, linkerd2, nushell, ztunnel, parseable, rustls-ffi, lychee, zed, efs-utils, py3-xet-core, rustup, linkerd-network-validator, zellij, wasmcloud, zizmor, cargo-audit, linkerd-extension-init, deno, linkerd2-proxy...

GHSA-394X-VWMW-CRM3 vulnerabilities

Vulnerabilities for packages: qdrant, buck2, ntpd-rs, pixi, linkerd2, nushell, ztunnel, parseable, rustls-ffi, lychee, zed, efs-utils, py3-xet-core, rustup, linkerd-network-validator, wasmcloud, zizmor, cargo-audit, linkerd-extension-init, deno, linkerd2-proxy...

GHSA-434X-W66G-QW3R vulnerabilities

Vulnerabilities for packages: wadm, atuin, buck2, ntpd-rs, oranda, qdrant, wash, mdbook, pixi, mountpoint-s3, linkerd2, wizer, nushell, geckodriver, wasmtime, yazi, ztunnel, parseable, tealdeer, uv, lychee, pgcat, netavark, xh, zed, efs-utils, py3-xet-core, sqlx, shadowsocks-rust, samply,...

CVE-2026-25541 vulnerabilities

Vulnerabilities for packages: wadm, atuin, buck2, ntpd-rs, oranda, qdrant, wash, mdbook, pixi, mountpoint-s3, linkerd2, wizer, nushell, geckodriver, wasmtime, yazi, ztunnel, parseable, tealdeer, uv, lychee, pgcat, netavark, xh, zed, efs-utils, py3-xet-core, sqlx, shadowsocks-rust, samply,...

EUVD-2024-38551

Malicious code in bioql PyPI...

EUVD-2025-13396

Malicious code in bioql PyPI...

SUSE CVE-2025-43915

In Linkerd edge releases before edge-25.2.1, and Buoyant Enterprise for Linkerd releases 2.13.0-2.13.7, 2.14.0-2.14.10, 2.15.0-2.15.7, 2.16.0-2.16.4, and 2.17.0-2.17.1, resource exhaustion can occur for Linkerd proxy metrics...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: eksctl, flux-source-controller, cert-manager-cmctl, headlamp, kots, istio, k8sgpt, chartmuseum, helm-docs, helm-mapkubeapis, linkerd2, chart-testing, trivy, zot, flux-helm-controller, rancher-fleet, flux, cluster-api-helm-controller, envoy-gateway, helm-operator,...

GHSA-9H84-QMV7-982P vulnerabilities

Vulnerabilities for packages: eksctl, flux-source-controller, cert-manager-cmctl, headlamp, kots, istio, k8sgpt, chartmuseum, helm-docs, helm-mapkubeapis, linkerd2, chart-testing, trivy, zot, flux-helm-controller, rancher-fleet, flux, cluster-api-helm-controller, envoy-gateway, helm-operator, tw,...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: kuma, cert-manager-cmctl, cerbos, linkerd2, cluster-api-helm-controller-fips, harbor-fips, helm-operator-fips, cilium-cli, rancher-fleet, flux-helm-controller, zot, helm-operator, cerbos-fips, cluster-api-helm-controller, k8ssandra-client, pluto, kargo, flux,...