GO-2025-3802 vulnerabilities

Vulnerabilities for packages: cerbos-fips, cilium-cli, cert-manager-cmctl, harbor-fips, k8ssandra-client, envoy-gateway, k8ssandra-client-fips, linkerd2-fips, rancher-fleet, cerbos, zarf, consul-k8s-fips, chartmuseum-fips, helm-operator, kargo, zot, flux-fips, kots, trivy-fips, flux, eksctl,...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: ocm-cli, gitness, trivy-operator, kyverno-notation-aws, gogatekeeper, k8ssandra-client-fips, kube-mgmt-fips, kgateway, conftest, kubescape-server-fips, chartmuseum-fips, gitlab-operator-fips, jfrog-cli, kube-mgmt, kots, helm, helm-operator-fips, maru,...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, cerbos, k9s, istio, cilium-cli, helm-operator, rancher-helm, tw, trivy, pluto, chart-testing, eksctl, k8ssandra-client, chartmuseum, rancher-fleet, helm-push, k8sgpt, kargo, kots, zarf, flux-helm-controller, helm-docs, linkerd2, envoy-gateway,...

GO-2025-3678 vulnerabilities

Vulnerabilities for packages: deno, lychee, parseable, pixi, cargo-audit, shadowsocks-rust, zola, sqlx, wadm, sdp-k8s-injector, rustls-ffi, rye, linkerd-extension-init, sccache, kdash, xh, wasmtime, tealdeer, wash, wasmcloud, wasm-pack, oranda, ntpd-rs, zed, qdrant, samply, atuin, uv, zizmor,...

CLEANSTART-2026-IN12478 Security fixes in linkerd2 26.4.3-r0

Package linkerd2 version 26.4.3-r0 fixes 11 vulnerabilities: CVE-2026-39820, CVE-2026-42499, CVE-2026-33814, CVE-2026-33811, CVE-2026-39836...

CLEANSTART-2026-VG53890 Security fixes in linkerd2 26.4.2

Package linkerd2 version 26.4.2 fixes 4 vulnerabilities: CVE-2026-35469, CVE-2026-35206, ghsa-hr2v-4r36-88hr, ghsa-pc3f-x583-g7j2...

CLEANSTART-2026-DJ16607 Security fixes in linkerd2 25.12.3-r0

Package linkerd2 version 25.12.3-r0 fixes 17 vulnerabilities: CVE-2026-35469, CVE-2026-33186, CVE-2026-35206, CVE-2025-68121, CVE-2025-61726...

CLEANSTART-2026-ME29225 Security fixes in linkerd2 26.2.1-r0

Package linkerd2 version 26.2.1-r0 fixes 2 vulnerabilities: CVE-2026-27141, CVE-2026-27141...

CLEANSTART-2026-VP07288 Security fixes in linkerd2 26.3.3-r0

Package linkerd2 version 26.3.3-r0 fixes 1 vulnerabilities: ghsa-mh2q-q3fh-2475...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, syft, trivy-operator, kube-mgmt-fips, amazon-ecs-agent-fips, kgateway, docker-cli-buildx, kubescape-server-fips, chartmuseum-fips, docker-compose, jfrog-cli, kube-mgmt, kots, cg, grype-fips, kubescape-operator, datadog-agent-fips, helm,...

CLEANSTART-2026-AH59738 Security fixes for CVE-2026-35469, ghsa-hr2v-4r36-88hr, ghsa-pc3f-x583-g7j2 applied in versions: 26.4.2

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HI64288 Security fixes for CVE-2026-35469, ghsa-hr2v-4r36-88hr, ghsa-pc3f-x583-g7j2 applied in versions: 26.4.2

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QX43073 Security fixes for CVE-2026-29181, CVE-2026-33186, CVE-2026-35469, ghsa-hr2v-4r36-88hr, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2 applied in versions: 26.1.4-r0, 26.3.3-r0

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UJ59341 Security fixes for CVE-2026-27141, CVE-2026-35469, ghsa-hr2v-4r36-88hr, ghsa-pc3f-x583-g7j2 applied in versions: 26.2.1-r0, 26.4.2

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WV75091 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 25.12.3-r0, 25.12.3-r1

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OX51942 Security fixes for CVE-2026-29181, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, ghsa-hr2v-4r36-88hr, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2 applied in versions: 26.1.4-r0, 26.1.4-r1

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-82J2-J2CH-GFR8 vulnerabilities

Vulnerabilities for packages: wasmtime, rustup, pixi, kdash, ztunnel, tealdeer, cargo-audit, rye, ztunnel-fips, linkerd-extension-init, buck2, zellij, shadowsocks-rust, sccache, komodo, mise, nushell, atuin, garage, wasm-pack, berg, asciinema, sentry-cli, linkerd2-cni-plugin, parseable,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: kubernetes, kwok, kubernetes-dashboard-api, cilium, gitlab-kas, k3s, k9s, kiali, jitsucom-bulker, aws-node-termination-handler, hubble, gitlab-runner, argocd-image-updater, falcoctl, postgres-operator, k8sgpt-operator, kubeflow-pipelines, docker-cli-buildx, istio,...

GHSA-CQ8V-F236-94QC vulnerabilities

Vulnerabilities for packages: linkerd-network-validator, deno, efs-utils, lychee, just, parseable, pixi, cargo-audit, shadowsocks-rust, mountpoint-s3, yara-x, pgcat, zola, sqlx, rav1e, wadm, sdp-k8s-injector, cargo-c, starship, uutils, rye, sccache, ruff, wizer, kdash, xh, fish, wasmtime, biome,...

GHSA-CQ8V-F236-94QC vulnerabilities

Vulnerabilities for packages: hurl, wasmtime, rustup, netavark, pixi, kdash, uutils, efs-utils, cargo-audit, zed, bootc, rye, biome, buck2, vector, yazi, virtiofsd, chaos-tproxy, zellij, cargo-c, mountpoint-s3, shadowsocks-rust, pgcat, sccache, komodo, mise, nushell, atuin, zola, garage, berg,...