GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: helmfile, amazon-ecs-agent, neuvector, datadog-agent-fips, newrelic-infrastructure-agent, headlamp, livekit-cli, chainctl-fips, kubescape-operator, chartmuseum-fips, helm-mapkubeapis, crossplane-fips, rancher-agent, gatekeeper, chaos-mesh, crossplane, manifest-tool,...

CLEANSTART-2026-AH59738 Security fixes for CVE-2026-35469, ghsa-hr2v-4r36-88hr, ghsa-pc3f-x583-g7j2 applied in versions: 26.4.2

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HI64288 Security fixes for CVE-2026-35469, ghsa-hr2v-4r36-88hr, ghsa-pc3f-x583-g7j2 applied in versions: 26.4.2

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QX43073 Security fixes for CVE-2026-29181, CVE-2026-33186, CVE-2026-35469, ghsa-hr2v-4r36-88hr, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2 applied in versions: 26.1.4-r0, 26.3.3-r0

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UJ59341 Security fixes for CVE-2026-27141, CVE-2026-35469, ghsa-hr2v-4r36-88hr, ghsa-pc3f-x583-g7j2 applied in versions: 26.2.1-r0, 26.4.2

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OX51942 Security fixes for CVE-2026-29181, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, ghsa-hr2v-4r36-88hr, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2 applied in versions: 26.1.4-r0, 26.1.4-r1

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-82J2-J2CH-GFR8 vulnerabilities

Vulnerabilities for packages: wasmcloud, ntpd-rs, cargo-audit, py3-xet-core, uv, linkerd-extension-init, komodo, mise, buck2, lychee, ztunnel, linkerd2, rye, wasmtime, garage, zola, fnm, shadowsocks-rust, rustup, parseable, qdrant, zizmor, samply, atuin, wasm-pack, xh, deno, asciinema,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: trivy, kpt, kubernetes-dashboard-api, argo-cd, kube-arangodb, sonobuoy, rancher-fleet, k8sgpt-operator, cert-manager-istio-csr, k3s, falcoctl, verticadb-operator, redis-operator, zarf, linkerd2, infinispan-operator, kargo, kubevela, cri-tools, kiali, rancher-agent,...

GHSA-CQ8V-F236-94QC vulnerabilities

Vulnerabilities for packages: ntpd-rs, parseable, pgcat, mdbook, uv, nushell, wasmtime, efs-utils, just, kdash, sqlx, biome, zola, zellij, lychee, linkerd2, samply, ruff, sdp-k8s-injector, wasmcloud, zed, zizmor, yazi, atuin, mountpoint-s3, hurl, netavark, shadowsocks-rust, xh,...

GHSA-CQ8V-F236-94QC vulnerabilities

Vulnerabilities for packages: wasmcloud, cargo-c, cargo-audit, ntpd-rs, py3-xet-core, uv, mise, komodo, buck2, mdbook, lychee, rav1e, linkerd2, mountpoint-s3, rye, sdp-k8s-injector, wasmtime, garage, zola, fnm, guestproxyagent, pgcat, rustup, shadowsocks-rust, parseable, typst, yazi, yara-x,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: dapr, rekor-fips, yunikorn-k8shim, kyverno, kubevirt-cdi-uploadproxy, nats, crossplane-provider-azure-authorization, tetragon, thanos-receive-controller, cilium, amazon-ecs-cni-plugins-fips, newrelic-infrastructure-agent, kyverno-policy-reporter-ui,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: kubevirt-cdi-uploadproxy, tetragon, thanos-receive-controller, amazon-ecs-cni-plugins-fips, db-operator, licenseclassifier, crossplane-provider-aws-dynamodb-fips, crossplane-provider-aws-acm, custom-pod-autoscaler-operator, nri-discovery-kubernetes, cerbos, chaos-mes...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: dapr, rekor-fips, yunikorn-k8shim, kyverno, kubevirt-cdi-uploadproxy, nats, crossplane-provider-azure-authorization, tetragon, thanos-receive-controller, cilium, amazon-ecs-cni-plugins-fips, newrelic-infrastructure-agent, kyverno-policy-reporter-ui,...

GHSA-9F94-5G5W-GF6R vulnerabilities

Vulnerabilities for packages: wasmcloud, ntpd-rs, cargo-audit, py3-xet-core, linkerd-extension-init, komodo, mise, buck2, lychee, rustls-ffi, linkerd2, ztunnel, garage, rustup, parseable, efs-utils, qdrant, zizmor, deno, linkerd-network-validator, linkerd2-cni-plugin, zellij, nushell, zed, pixi,...

GHSA-394X-VWMW-CRM3 vulnerabilities

Vulnerabilities for packages: wasmcloud, ntpd-rs, cargo-audit, py3-xet-core, linkerd-extension-init, komodo, mise, buck2, lychee, rustls-ffi, linkerd2, ztunnel, garage, rustup, parseable, efs-utils, qdrant, zizmor, deno, linkerd-network-validator, linkerd2-cni-plugin, nushell, zed, pixi,...

CVE-2026-25541 vulnerabilities

Vulnerabilities for packages: ntpd-rs, parseable, pgcat, mdbook, uv, nushell, wasmtime, efs-utils, kdash, sqlx, geckodriver, zola, zellij, qdrant, lychee, helix, linkerd2, samply, sdp-k8s-injector, wasmcloud, zed, zizmor, yazi, atuin, mountpoint-s3, wash, netavark, shadowsocks-rust, xh, oranda,...

GHSA-434X-W66G-QW3R vulnerabilities

Vulnerabilities for packages: ntpd-rs, parseable, pgcat, mdbook, uv, nushell, wasmtime, efs-utils, kdash, sqlx, geckodriver, zola, zellij, qdrant, lychee, helix, linkerd2, samply, sdp-k8s-injector, wasmcloud, zed, zizmor, yazi, atuin, mountpoint-s3, wash, netavark, shadowsocks-rust, xh, oranda,...

CVE-2025-55199 vulnerabilities

Vulnerabilities for packages: trivy, helm-set-status, pluto, helm-docs, cerbos, kube-arangodb, rancher-fleet, kuma, harbor, chart-testing, nova, zot, zarf, linkerd2, kargo, cert-manager-cmctl, k9s, helm-push, istio, consul-k8s, headlamp, trivy-operator, cluster-api-helm-controller, eksctl,...

GHSA-F9F8-9PMF-XV68 vulnerabilities

Vulnerabilities for packages: trivy, helm-set-status, pluto, helm-docs, cerbos, kube-arangodb, rancher-fleet, kuma, harbor, chart-testing, nova, zot, zarf, linkerd2, kargo, cert-manager-cmctl, k9s, helm-push, istio, consul-k8s, headlamp, trivy-operator, cluster-api-helm-controller, eksctl,...

CVE-2025-55199 vulnerabilities

Vulnerabilities for packages: harbor, kube-arangodb-fips, zot, consul-k8s, flux-source-controller-fips, harbor-fips, headlamp, istio-fips, kube-arangodb, linkerd2, headlamp-fips, chart-testing-fips, chartmuseum, consul-k8s-fips, helm-docs, kuma, cloudbeat-fips, helm-push, cert-manager,...