GHSA-6W6G-HM98-MHGM vulnerabilities

Vulnerabilities for packages: ntpd-rs, apollo-router, komodo, vector, linkerd2-proxy, sccache...

GHSA-6F2X-V7Q7-M7M5 vulnerabilities

Vulnerabilities for packages: vector, linkerd2-proxy, ntpd-rs, sccache...

GHSA-6W6G-HM98-MHGM vulnerabilities

Vulnerabilities for packages: vector, linkerd2-proxy, ntpd-rs, sccache...

GHSA-5J98-2G5X-46V6 vulnerabilities

Vulnerabilities for packages: vector, linkerd2-proxy, ntpd-rs, sccache...

CLEANSTART-2026-UQ10912 Security fix for CVE-2026-35206 applied in: cert-manager-cmctl-fips 2.4.0-r3, chartmuseum-fips 0.16.5-r0, harbor-scanner-trivy 0.35.1-r1, harbor-scanner-trivy-fips 0.35.1-r1, helm-operator 1.42.1-r0, helm-operator 1.42.2-r0, helm-operator-fips 1.41.1-r2, k8ssandra-client-fips 0.7.0-r5, k8ssandra-client-fips 0.8.10-r1, k8ssandra-client-fips 0.8.11-r0, k8ssandra-client-fips 0.8.9-r0, kubevela 1.10.8-r0, kumactl 2.11.12-r0, kumactl 2.12.9-r0, kumactl 2.13.4-r0, linkerd2 25.12.3-r0, linkerd2 26.1.4-r0, linkerd2 26.4.2, rancher-fleet-agent 0.12.17-r2, rancher-fleet-agent 0.13.13-r1, rancher-fleet-agent 0.14.10-r1, rancher-fleet-agent 0.14.8-r2, rancher-fleet-agent 0.15.4-r3, rancher-fleet-agent 0.15.6-r0, rancher-fleet-agent 0.16.1-r1, tigera-operator 1.41.1-r0

CVE-2026-35206 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AA09584 Security fix for ghsa-hr2v-4r36-88hr applied in: cert-manager-cmctl-fips 2.4.0-r3, chartmuseum-fips 0.16.5-r0, helm-operator 1.42.2-r0, helm-operator-fips 1.41.1-r2, k8ssandra-client-fips 0.8.10-r1, k8ssandra-client-fips 0.8.11-r0, kubevela 1.10.8-r0, linkerd2 26.1.4-r0, linkerd2 26.4.2, tigera-operator 1.41.1-r0

ghsa-hr2v-4r36-88hr affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: zot, zarf, rancher-fleet, flux-source-controller-fips, k8ssandra-client-fips, helm-docs, harbor-fips, trivy-fips, tw, linkerd2-fips, helm-operator, helm-push, teleport, cerbos, consul-k8s, istio, harbor, chart-testing, chartmuseum-fips, chartmuseum,...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: ocm-cli, trivy-operator, vcluster-fips, drone-fips, helm-operator, helm-push, rancher-agent, xeol, zarf-fips, crossplane, manifest-tool, cluster-api-helm-controller, cert-manager-cmctl-fips, tigera-operator, eksctl, ocm-kubernetes-controller, envoy-gateway-fips,...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: zarf, cert-manager-cmctl, trivy, helm-docs, tw, cilium-cli, cerbos, k8sgpt, kots, chart-testing, pluto, flux-source-controller, k8ssandra-client, rancher-fleet, rancher-helm, envoy-gateway, eksctl, flux-helm-controller, zot, k9s, kargo, helm-operator, istio, linkerd2...

GO-2025-3678 vulnerabilities

Vulnerabilities for packages: rustls-ffi, linkerd-extension-init, lychee, uv, wasmtime, rustup, kdash, wadm, wasm-pack, sqlx, oranda, shadowsocks-rust, zed, qdrant, xh, buck2, tealdeer, zola, cargo-audit, nushell, samply, sccache, ntpd-rs, zizmor, parseable, sdp-k8s-injector, atuin, pixi, wash,...

CLEANSTART-2026-ME29225 Security fixes in linkerd2 26.2.1-r0

Package linkerd2 version 26.2.1-r0 fixes 2 vulnerabilities: CVE-2026-27141, CVE-2026-27141...

CLEANSTART-2026-IN12478 Security fixes in linkerd2 26.4.3-r0

Package linkerd2 version 26.4.3-r0 fixes 11 vulnerabilities: CVE-2026-39820, CVE-2026-42499, CVE-2026-33814, CVE-2026-33811, CVE-2026-39836...

CLEANSTART-2026-VG53890 Security fixes in linkerd2 26.4.2

Package linkerd2 version 26.4.2 fixes 4 vulnerabilities: CVE-2026-35469, CVE-2026-35206, ghsa-hr2v-4r36-88hr, ghsa-pc3f-x583-g7j2...

CLEANSTART-2026-VP07288 Security fixes in linkerd2 26.3.3-r0

Package linkerd2 version 26.3.3-r0 fixes 1 vulnerabilities: ghsa-mh2q-q3fh-2475...

CLEANSTART-2026-DJ16607 Security fixes in linkerd2 25.12.3-r0

Package linkerd2 version 25.12.3-r0 fixes 17 vulnerabilities: CVE-2026-35469, CVE-2026-33186, CVE-2026-35206, CVE-2025-68121, CVE-2025-61726...

PT-2026-86063

Package linkerd2 version 26.3.3-r0 fixes 1 vulnerabilities: ghsa-mh2q-q3fh-2475...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: datadog-agent-fips, harvester, ctop, dagger, docker-fips, chainctl-fips, harvester-fips, kaniko-fips, trivy-operator, helm-operator, helm-push, wolfictl, docker-cli-buildx, rancher-agent, kubevela-fips, livekit-cli, xeol, zarf-fips, buildkitd, crossplane,...

CLEANSTART-2026-AH59738 Security fixes for CVE-2026-35469, ghsa-hr2v-4r36-88hr, ghsa-pc3f-x583-g7j2 applied in versions: 26.4.2

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HI64288 Security fixes for CVE-2026-35469, ghsa-hr2v-4r36-88hr, ghsa-pc3f-x583-g7j2 applied in versions: 26.4.2

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QX43073 Security fixes for CVE-2026-29181, CVE-2026-33186, CVE-2026-35469, ghsa-hr2v-4r36-88hr, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2 applied in versions: 26.1.4-r0, 26.3.3-r0

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...