CLEANSTART-2026-VG53890 Security fixes in linkerd2 26.4.2

Package linkerd2 version 26.4.2 fixes 4 vulnerabilities: CVE-2026-35469, CVE-2026-35206, ghsa-hr2v-4r36-88hr, ghsa-pc3f-x583-g7j2...

CLEANSTART-2026-IN12478 Security fixes in linkerd2 26.4.3-r0

Package linkerd2 version 26.4.3-r0 fixes 11 vulnerabilities: CVE-2026-39820, CVE-2026-42499, CVE-2026-33814, CVE-2026-33811, CVE-2026-39836...

CLEANSTART-2026-DJ16607 Security fixes in linkerd2 25.12.3-r0

Package linkerd2 version 25.12.3-r0 fixes 17 vulnerabilities: CVE-2026-35469, CVE-2026-33186, CVE-2026-35206, CVE-2025-68121, CVE-2025-61726...

CLEANSTART-2026-ME29225 Security fixes in linkerd2 26.2.1-r0

Package linkerd2 version 26.2.1-r0 fixes 2 vulnerabilities: CVE-2026-27141, CVE-2026-27141...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: manifest-tool, spegel, trivy-operator-fips, linkerd2, amazon-ecs-agent-fips, kubescape, kaniko-fips, chartmuseum, chartmuseum-fips, kgateway-fips, helmfile, zarf-fips, cg, cluster-api-helm-controller-fips, xeol, helm-operator-fips, harvester-fips, steampipe,...

CLEANSTART-2026-AH59738 Security fixes for CVE-2026-35469, ghsa-hr2v-4r36-88hr, ghsa-pc3f-x583-g7j2 applied in versions: 26.4.2

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HI64288 Security fixes for CVE-2026-35469, ghsa-hr2v-4r36-88hr, ghsa-pc3f-x583-g7j2 applied in versions: 26.4.2

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QX43073 Security fixes for CVE-2026-29181, CVE-2026-33186, CVE-2026-35469, ghsa-hr2v-4r36-88hr, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2 applied in versions: 26.1.4-r0, 26.3.3-r0

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UJ59341 Security fixes for CVE-2026-27141, CVE-2026-35469, ghsa-hr2v-4r36-88hr, ghsa-pc3f-x583-g7j2 applied in versions: 26.2.1-r0, 26.4.2

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WV75091 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 25.12.3-r0, 25.12.3-r1

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OX51942 Security fixes for CVE-2026-29181, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, ghsa-hr2v-4r36-88hr, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2 applied in versions: 26.1.4-r0, 26.1.4-r1

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-82J2-J2CH-GFR8 vulnerabilities

Vulnerabilities for packages: kdash, pixi, shadowsocks-rust, buck2, cargo-audit, linkerd2, samply, uv, wasmcloud, py3-xet-core, lychee, berg, zizmor, komodo, garage, ntpd-rs, linkerd-network-validator, wasm-pack, asciinema, rye, sentry-cli, xh, atuin, sccache, zellij, wasmtime, lakekeeper, mise,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: vcluster, jitsucom-bulker, headlamp, cri-tools, falcoctl, docker-cli-buildx, gitlab-runner, kube-arangodb, argo-cd, eksctl, dynamic-localpv-provisioner, gitlab-kas, juicefs-csi-driver, kots, argocd-image-updater, cert-manager-istio-csr, kubernetes, consul-k8s,...

GHSA-CQ8V-F236-94QC vulnerabilities

Vulnerabilities for packages: rye, samply, yazi, sdp-k8s-injector, deno, linkerd-network-validator, netavark, wizer, uutils, cargo-audit, nushell, vector, berg, sccache, zed, zellij, linkerd2, rav1e, zizmor, yara-x, fish, rustup, sqlx, uv, wadm, starship, linkerd2-proxy, parseable, lychee, mdbook...

GHSA-CQ8V-F236-94QC vulnerabilities

Vulnerabilities for packages: kdash, pixi, shadowsocks-rust, buck2, virtiofsd, rav1e, cargo-audit, linkerd2, zed, samply, pgcat, uv, wasmcloud, py3-xet-core, berg, lychee, zizmor, hurl, garage, komodo, valkey-ldap, bootc, jujutsu, ntpd-rs, fish, linkerd-network-validator, asciinema, rye, cargo-c,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis-fips, kubernetes-dashboard-metrics-scraper, tempo, longhorn-manager-fips, victoriametrics, ip-masq-agent, flannel-fips, vertical-pod-autoscaler-fips, cilium-fips, etcd, github-mcp-server, loki-fips, tkn-fips, caddy, kube-vip-fips,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis-fips, kubernetes-dashboard-metrics-scraper, tempo, longhorn-manager-fips, victoriametrics, ip-masq-agent, flannel-fips, vertical-pod-autoscaler-fips, cilium-fips, etcd, github-mcp-server, loki-fips, tkn-fips, caddy, kube-vip-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler-fips, flannel-fips, amazon-cloudwatch-agent, dex-fips, kyverno-policy-reporter-plugins-kyverno-fips, nrdot-collector-k8s-fips, nri-rabbitmq, amazon-vpc-cni-plugins-fips, sonobuoy, http-echo, dcgm-exporter, image-factory-fips, kpt,...

GHSA-9F94-5G5W-GF6R vulnerabilities

Vulnerabilities for packages: pixi, buck2, cargo-audit, linkerd2, zed, wasmcloud, py3-xet-core, lychee, zizmor, komodo, garage, ntpd-rs, linkerd-network-validator, zellij, mise, rustup, nushell, qdrant, rustls-ffi, linkerd2-cni-plugin, linkerd-extension-init, deno, efs-utils, ztunnel, parseable,...

GHSA-394X-VWMW-CRM3 vulnerabilities

Vulnerabilities for packages: pixi, buck2, cargo-audit, linkerd2, zed, wasmcloud, py3-xet-core, lychee, zizmor, komodo, garage, ntpd-rs, linkerd-network-validator, mise, rustup, nushell, qdrant, rustls-ffi, linkerd2-cni-plugin, linkerd-extension-init, deno, efs-utils, ztunnel, parseable,...