GO-2025-3678 vulnerabilities

Vulnerabilities for packages: sqlx, shadowsocks-rust, wadm, uv, wasm-pack, xh, oranda, qdrant, samply, sdp-k8s-injector, rustup, zed, zizmor, sccache, wasmcloud, rye, ntpd-rs, lychee, rustls-ffi, linkerd-extension-init, cargo-audit, linkerd2-proxy, pixi, wasmtime, parseable, atuin, buck2, nushell...

CLEANSTART-2026-VT52246 Security fixes in linkerd2 26.1.4-r0

Package linkerd2 version 26.1.4-r0 fixes 7 vulnerabilities: ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-hr2v-4r36-88hr, CVE-2026-35469, CVE-2026-33186...

GHSA-82J2-J2CH-GFR8 vulnerabilities

Vulnerabilities for packages: samply, linkerd2-proxy, py3-xet-core, rustls-openssl-client, sccache, rustup, linkerd2-cni-plugin, linkerd2, asciinema, ztunnel, mise, deno, cargo-audit, buck2, kdash, xh, shadowsocks-rust, linkerd-extension-init, zizmor, nushell, pixi, garage, wasmcloud, lychee,...

GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: sqlx, shadowsocks-rust, linkerd2, uv, wasm-pack, xh, ztunnel, qdrant, samply, sdp-k8s-injector, rustup, zizmor, sccache, wasmcloud, rye, ntpd-rs, lychee, berg, linkerd-extension-init, cargo-audit, linkerd2-proxy, pixi, wasmtime, parseable, atuin, zellij, buck2, deno,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: gitlab-runner, cilium-cli, rancher, kubernetes-dashboard-api, velero, verticadb-operator, infinispan-operator, jitsucom-bulker, datadog-agent, hubble, cilium, k3s, cloudnative-pg, argo-workflows, kubernetes, kubescape, linkerd2, rancher-agent, teleport,...

GHSA-XGP8-3HG3-C2MH vulnerabilities

Vulnerabilities for packages: sqlx, shadowsocks-rust, linkerd2, uv, wasm-pack, xh, ztunnel, qdrant, samply, sdp-k8s-injector, rustup, zizmor, sccache, wasmcloud, rye, ntpd-rs, lychee, berg, linkerd-extension-init, cargo-audit, linkerd2-proxy, pixi, wasmtime, parseable, atuin, zellij, buck2, deno,...

GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: samply, linkerd2-proxy, py3-xet-core, sccache, rustup, linkerd2-cni-plugin, linkerd2, asciinema, ztunnel, mise, deno, cargo-audit, buck2, kdash, xh, shadowsocks-rust, linkerd-extension-init, zizmor, pixi, garage, wasmcloud, lychee, sdp-k8s-injector, wasmtime,...

GHSA-XGP8-3HG3-C2MH vulnerabilities

Vulnerabilities for packages: samply, linkerd2-proxy, py3-xet-core, sccache, rustup, linkerd2-cni-plugin, linkerd2, asciinema, ztunnel, mise, deno, cargo-audit, buck2, kdash, xh, shadowsocks-rust, linkerd-extension-init, zizmor, pixi, garage, wasmcloud, lychee, sdp-k8s-injector, wasmtime,...

GHSA-CQ8V-F236-94QC vulnerabilities

Vulnerabilities for packages: fish, sqlx, vector, wizer, starship, shadowsocks-rust, wadm, linkerd2, uv, xh, ruff, qdrant, mdbook, just, mountpoint-s3, samply, pgcat, sdp-k8s-injector, rustup, zed, cargo-c, py3-xet-core, zizmor, sccache, wasmcloud, rye, ntpd-rs, lychee, uutils, berg, cargo-audit,...

GHSA-CQ8V-F236-94QC vulnerabilities

Vulnerabilities for packages: samply, linkerd2-proxy, jujutsu, py3-xet-core, sccache, wizer, hurl, rustup, valkey-ldap, linkerd2, asciinema, virtiofsd, apollo-router, chaos-tproxy, mise, deno, cargo-audit, ruff, yazi, cargo-c, fish, guestproxyagent, zed, watchexec, buck2, efs-utils, kdash, xh,...

GHSA-394X-VWMW-CRM3 vulnerabilities

Vulnerabilities for packages: linkerd2, ztunnel, qdrant, rustup, zed, zizmor, wasmcloud, ntpd-rs, lychee, rustls-ffi, linkerd-extension-init, cargo-audit, linkerd2-proxy, pixi, parseable, buck2, nushell, deno, linkerd-network-validator, py3-xet-core, efs-utils...

GHSA-9F94-5G5W-GF6R vulnerabilities

Vulnerabilities for packages: linkerd2, ztunnel, qdrant, rustup, zed, zizmor, wasmcloud, ntpd-rs, lychee, rustls-ffi, linkerd-extension-init, cargo-audit, linkerd2-proxy, pixi, parseable, zellij, buck2, nushell, deno, linkerd-network-validator, py3-xet-core, efs-utils...

CVE-2026-25541 vulnerabilities

Vulnerabilities for packages: sqlx, wizer, geckodriver, shadowsocks-rust, linkerd-await, linkerd2, wadm, uv, xh, oranda, qdrant, mdbook, mountpoint-s3, samply, pgcat, sdp-k8s-injector, rustup, zed, cargo-c, py3-xet-core, zizmor, sccache, wasmcloud, ntpd-rs, lychee, berg, linkerd-extension-init,...

GHSA-434X-W66G-QW3R vulnerabilities

Vulnerabilities for packages: sqlx, wizer, geckodriver, shadowsocks-rust, linkerd-await, linkerd2, wadm, uv, xh, oranda, qdrant, mdbook, mountpoint-s3, samply, pgcat, sdp-k8s-injector, rustup, zed, cargo-c, py3-xet-core, zizmor, sccache, wasmcloud, ntpd-rs, lychee, berg, linkerd-extension-init,...

EUVD-2025-13396

Malicious code in bioql PyPI...

EUVD-2024-38551

Malicious code in bioql PyPI...

SUSE CVE-2025-43915

In Linkerd edge releases before edge-25.2.1, and Buoyant Enterprise for Linkerd releases 2.13.0-2.13.7, 2.14.0-2.14.10, 2.15.0-2.15.7, 2.16.0-2.16.4, and 2.17.0-2.17.1, resource exhaustion can occur for Linkerd proxy metrics...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: cilium-cli, trivy-operator, kubescape, linkerd2, helm-push, helm-mapkubeapis, nova, flux-source-controller, helm-operator, chart-testing, cert-manager-cmctl, eksctl, flux, helm-set-status, zarf, chartmuseum, headlamp, istio, flux-helm-controller, kots, zot, k9s,...

GHSA-9H84-QMV7-982P vulnerabilities

Vulnerabilities for packages: cilium-cli, trivy-operator, kubescape, linkerd2, helm-push, helm-mapkubeapis, nova, flux-source-controller, helm-operator, chart-testing, cert-manager-cmctl, eksctl, flux, helm-set-status, zarf, chartmuseum, headlamp, istio, flux-helm-controller, kots, zot, k9s,...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: k8ssandra-client, consul-k8s-fips, nova, headlamp, flux-helm-controller-fips, cerbos, helm-operator-fips, k9s, kargo, kubescape, cluster-api-helm-controller-fips, k9s-fips, istio, linkerd2, chart-testing-fips, pluto-fips, trivy-operator, helm-operator, teleport,...