GO-2025-3802 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl-fips, helm-push, kots, kuma, cerbos, trivy, k8ssandra-client-fips, kargo, flux-source-controller, eksctl, rancher-fleet-fips, k8sgpt, flux-helm-controller-fips, harbor-fips, consul-k8s-fips, istio, linkerd2, zarf, consul-k8s,...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl-fips, helm-push, drone, xeol, gitlab-operator, zarf, consul-k8s, headlamp, maru, jfrog-cli, ocm-kubernetes-controller-fips, linkerd2-fips, teleport, cert-manager-cmctl, cloudbeat, envoy-gateway-fips, rancher-helm, cluster-api-helm-controller,...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: flux-source-controller, linkerd2, rancher-fleet, cluster-api-helm-controller, k9s, cerbos, pluto, k8ssandra-client, helm-push, tw, zarf, chartmuseum, cilium-cli, kargo, kots, cert-manager-cmctl, envoy-gateway, helm-docs, trivy, eksctl, chart-testing, rancher-helm,...

GO-2025-3678 vulnerabilities

Vulnerabilities for packages: deno, sdp-k8s-injector, wasmcloud, lychee, uv, wasmtime, wash, xh, zizmor, linkerd-extension-init, linkerd2-proxy, cargo-audit, sccache, qdrant, kdash, wasm-pack, atuin, sqlx, nushell, zola, pixi, rustup, ntpd-rs, rye, buck2, parseable, tealdeer, oranda, wadm, zed,...

CLEANSTART-2026-VG53890 Security fixes in linkerd2 26.4.2

Package linkerd2 version 26.4.2 fixes 4 vulnerabilities: CVE-2026-35469, CVE-2026-35206, ghsa-hr2v-4r36-88hr, ghsa-pc3f-x583-g7j2...

CLEANSTART-2026-IN12478 Security fixes in linkerd2 26.4.3-r0

Package linkerd2 version 26.4.3-r0 fixes 11 vulnerabilities: CVE-2026-39820, CVE-2026-42499, CVE-2026-33814, CVE-2026-33811, CVE-2026-39836...

CLEANSTART-2026-ME29225 Security fixes in linkerd2 26.2.1-r0

Package linkerd2 version 26.2.1-r0 fixes 2 vulnerabilities: CVE-2026-27141, CVE-2026-27141...

CLEANSTART-2026-DJ16607 Security fixes in linkerd2 25.12.3-r0

Package linkerd2 version 25.12.3-r0 fixes 17 vulnerabilities: CVE-2026-35469, CVE-2026-33186, CVE-2026-35206, CVE-2025-68121, CVE-2025-61726...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: google-osconfig-agent, helm-push, newrelic-infrastructure-agent-fips, xeol, docker-compose, datadog-agent-fips, docker-fips, zarf, spegel-fips, consul-k8s, kaniko-fips, kubevela-fips, headlamp, jfrog-cli, kubevela, linkerd2-fips, teleport, envoy-gateway-fips,...

CLEANSTART-2026-AH59738 Security fixes for CVE-2026-35469, ghsa-hr2v-4r36-88hr, ghsa-pc3f-x583-g7j2 applied in versions: 26.4.2

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HI64288 Security fixes for CVE-2026-35469, ghsa-hr2v-4r36-88hr, ghsa-pc3f-x583-g7j2 applied in versions: 26.4.2

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QX43073 Security fixes for CVE-2026-29181, CVE-2026-33186, CVE-2026-35469, ghsa-hr2v-4r36-88hr, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2 applied in versions: 26.1.4-r0, 26.3.3-r0

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UJ59341 Security fixes for CVE-2026-27141, CVE-2026-35469, ghsa-hr2v-4r36-88hr, ghsa-pc3f-x583-g7j2 applied in versions: 26.2.1-r0, 26.4.2

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WV75091 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 25.12.3-r0, 25.12.3-r1

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OX51942 Security fixes for CVE-2026-29181, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, ghsa-hr2v-4r36-88hr, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2 applied in versions: 26.1.4-r0, 26.1.4-r1

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-82J2-J2CH-GFR8 vulnerabilities

Vulnerabilities for packages: buck2, ntpd-rs, asciinema, zola, lakekeeper, garage, parseable, zizmor, nushell, tealdeer, pixi, lychee, mise, berg, sentry-cli, ztunnel-fips, sdp-k8s-injector, linkerd2-cni-plugin, sccache, zellij, qdrant, xh, samply, sqlx, atuin, linkerd2, wasmtime, rye,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: verticadb-operator, gitlab-runner, cert-manager-istio-csr, kpt, argo-rollouts, linkerd2, cri-tools, k9s, rancher-fleet, terraform-provider-kubernetes, k8ssandra-client, zarf, kwok, hubble, kube-arangodb, kubescape, gitlab-kas, kubernetes, cilium-cli, cilium, kargo,...

GHSA-CQ8V-F236-94QC vulnerabilities

Vulnerabilities for packages: linkerd-network-validator, deno, sdp-k8s-injector, uutils, wasmcloud, linkerd2, lychee, uv, pgcat, wasmtime, xh, just, zizmor, cargo-c, wizer, berg, yazi, fish, cargo-audit, linkerd2-proxy, sccache, py3-xet-core, kdash, hurl, mdbook, efs-utils, atuin, sqlx, biome,...

GHSA-CQ8V-F236-94QC vulnerabilities

Vulnerabilities for packages: buck2, ntpd-rs, asciinema, zola, starship, garage, fish, mdbook, parseable, zizmor, nushell, cargo-c, ruff, pgcat, wadm, pixi, lychee, yazi, mise, berg, sentry-cli, typst, sdp-k8s-injector, sccache, virtiofsd, zellij, xh, samply, hurl, sqlx, atuin, just, bootc,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: helm-push, metacontroller, kubernetes-ingress-defaultbackend-fips, crossplane-provider-aws-ssm, eks-node-monitoring-agent, xeol, kube-oidc-proxy, nats-top-fips, spqr, kubernetes-dashboard-metrics-scraper-fips, kubernetes-csi-driver-nfs, kubescape-http-request-fips,...