CLEANSTART-2026-VT52246 Security fixes in linkerd2 26.1.4-r0

Package linkerd2 version 26.1.4-r0 fixes 7 vulnerabilities: ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-hr2v-4r36-88hr, CVE-2026-35469, CVE-2026-33186...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: consul-k8s, kargo, kiali, teleport, cert-manager-istio-csr, percona-server-mongodb-operator, terraform-provider-kubernetes, datadog-agent, kpt, redis-operator, argo-rollouts, hubble, cilium-cli, kubescape, rancher-fleet, kots, docker-cli-buildx, kwok, gitlab-runner,...

GHSA-9F94-5G5W-GF6R vulnerabilities

Vulnerabilities for packages: deno, linkerd-extension-init, buck2, cargo-audit, zizmor, py3-xet-core, qdrant, lychee, pixi, linkerd-network-validator, nushell, linkerd2-proxy, wasmcloud, zellij, parseable, efs-utils, rustls-ffi, ztunnel, rustup, ntpd-rs, zed, linkerd2...

GHSA-394X-VWMW-CRM3 vulnerabilities

Vulnerabilities for packages: deno, linkerd-extension-init, buck2, cargo-audit, zizmor, py3-xet-core, qdrant, lychee, pixi, linkerd-network-validator, nushell, linkerd2-proxy, wasmcloud, parseable, efs-utils, rustls-ffi, ztunnel, rustup, ntpd-rs, zed, linkerd2...

GHSA-9H84-QMV7-982P vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, flux, kargo, helm-push, helm-set-status, pluto, chart-testing, helm-operator, cilium-cli, kubescape, rancher-fleet, kots, flux-helm-controller, trivy-operator, zot, nova, eksctl, cluster-api-helm-controller, helm-mapkubeapis, flux-source-controlle...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: chart-testing, cerbos-fips, helm-set-status, cluster-api-helm-controller-fips, flux-helm-controller, k9s, consul-k8s, kargo, istio, nova-fips, headlamp, cerbos, envoy-gateway-fips, kuma, consul-k8s-fips, trivy-operator, k8ssandra-client, envoy-gateway,...

GHSA-QX2V-8332-M4FV vulnerabilities

Vulnerabilities for packages: uv, zola, pixi, linkerd-extension-init, mdbook, linkerd2-proxy, efs-utils, shadowsocks-rust, jujutsu, buck2, linkerd2...