GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, docker-cli-buildx-fips, newrelic-infrastructure-agent, rancher-agent, grype-db, helmfile, cluster-api-helm-controller, gitlab-rails-ce, k8sgpt, newrelic-infrastructure-agent-fips, kgateway-fips, neuvector-fips, docker-compose, spegel-fips,...

CLEANSTART-2026-AH59738 Security fixes for CVE-2026-35469, ghsa-hr2v-4r36-88hr, ghsa-pc3f-x583-g7j2 applied in versions: 26.4.2

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HI64288 Security fixes for CVE-2026-35469, ghsa-hr2v-4r36-88hr, ghsa-pc3f-x583-g7j2 applied in versions: 26.4.2

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QX43073 Security fixes for CVE-2026-29181, CVE-2026-33186, CVE-2026-35469, ghsa-hr2v-4r36-88hr, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2 applied in versions: 26.1.4-r0, 26.3.3-r0

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UJ59341 Security fixes for CVE-2026-27141, CVE-2026-35469, ghsa-hr2v-4r36-88hr, ghsa-pc3f-x583-g7j2 applied in versions: 26.2.1-r0, 26.4.2

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WV75091 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 25.12.3-r0, 25.12.3-r1

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OX51942 Security fixes for CVE-2026-29181, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, ghsa-hr2v-4r36-88hr, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2 applied in versions: 26.1.4-r0, 26.1.4-r1

Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-82J2-J2CH-GFR8 vulnerabilities

Vulnerabilities for packages: komodo, mise, nushell, asciinema, ztunnel, parseable, deno, linkerd-network-validator, linkerd-extension-init, samply, zizmor, qdrant, kdash, wasmtime, uv, berg, buck2, wasm-pack, ztunnel-fips, rye, shadowsocks-rust, py3-xet-core, sentry-cli, cargo-audit, lakekeeper,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: cloudnative-pg, rancher-fleet, envoy-gateway, verticadb-operator, k9s, dynamic-localpv-provisioner, gitlab-runner, jitsucom-bulker, k8ssandra-client, eksctl, kubevela, headlamp, linkerd2, skaffold, terraform-provider-kubernetes, argo-cd, emissary, argo-rollouts,...

GHSA-CQ8V-F236-94QC vulnerabilities

Vulnerabilities for packages: zola, atuin, mountpoint-s3, shadowsocks-rust, cargo-c, linkerd2, cargo-audit, buck2, linkerd2-proxy, rye, samply, sccache, zellij, netavark, linkerd-network-validator, wasmtime, yara-x, lychee, sdp-k8s-injector, yazi, nushell, mdbook, just, rav1e, uutils, wasmcloud,...

GHSA-CQ8V-F236-94QC vulnerabilities

Vulnerabilities for packages: guestproxyagent, komodo, starship, cargo-c, uutils, mise, nushell, wizer, hurl, asciinema, parseable, netavark, deno, linkerd-network-validator, samply, rav1e, yazi, apollo-router, zizmor, kdash, biome, wasmtime, uv, yara-x, watchexec, jujutsu, berg, buck2, rye,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: prometheus, crossplane-provider-aws-ec2-fips, kube-bench, docker-credential-acr-env-fips, newrelic-infrastructure-agent, nri-couchbase-fips, wavefront-collector-for-kubernetes, crossplane-provider-aws-kms-fips, longhorn-backing-image-manager, chart-testing-fips,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: prometheus, crossplane-provider-aws-ec2-fips, kube-bench, docker-credential-acr-env-fips, newrelic-infrastructure-agent, nri-couchbase-fips, wavefront-collector-for-kubernetes, crossplane-provider-aws-kms-fips, longhorn-backing-image-manager, chart-testing-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: wireguard-go, kube-bench, docker-credential-acr-env-fips, percona-xtradb-cluster-operator, flux-helm-controller-fips, sftpgo-plugin-geoipfilter, coredns-fips, terraform-provider-kubernetes, virt-api-fips, amazon-k8s-cni, gitlab-rails-ce, beats-fips, nri-redis,...

GHSA-394X-VWMW-CRM3 vulnerabilities

Vulnerabilities for packages: komodo, mise, nushell, ztunnel, parseable, deno, linkerd-network-validator, linkerd-extension-init, zizmor, qdrant, rustls-ffi, buck2, py3-xet-core, zed, cargo-audit, pixi, garage, lychee, linkerd2, ntpd-rs, linkerd2-proxy, efs-utils, linkerd2-cni-plugin, wasmcloud,...

GHSA-9F94-5G5W-GF6R vulnerabilities

Vulnerabilities for packages: komodo, mise, nushell, ztunnel, parseable, deno, linkerd-network-validator, linkerd-extension-init, zizmor, qdrant, rustls-ffi, buck2, py3-xet-core, zed, cargo-audit, pixi, garage, lychee, linkerd2, ntpd-rs, linkerd2-proxy, zellij, efs-utils, linkerd2-cni-plugin,...

CVE-2026-25541 vulnerabilities

Vulnerabilities for packages: zola, wash, atuin, mountpoint-s3, shadowsocks-rust, cargo-c, linkerd2, cargo-audit, buck2, linkerd2-proxy, samply, sccache, geckodriver, topgrade, zellij, netavark, linkerd-network-validator, wasmtime, lychee, sdp-k8s-injector, yazi, nushell, mdbook, tealdeer, berg,...

GHSA-434X-W66G-QW3R vulnerabilities

Vulnerabilities for packages: zola, wash, atuin, mountpoint-s3, shadowsocks-rust, cargo-c, linkerd2, cargo-audit, buck2, linkerd2-proxy, samply, sccache, geckodriver, topgrade, zellij, netavark, linkerd-network-validator, wasmtime, lychee, sdp-k8s-injector, yazi, nushell, mdbook, tealdeer, berg,...

CVE-2025-55199 vulnerabilities

Vulnerabilities for packages: rancher-fleet, envoy-gateway, k9s, helm-mapkubeapis, k8ssandra-client, linkerd2, eksctl, headlamp, flux, harbor, trivy-operator, flux-source-controller, cluster-api-helm-controller, teleport, cilium-cli, zarf, helm-push, istio, trivy, nova, cerbos, chart-testing,...

GHSA-F9F8-9PMF-XV68 vulnerabilities

Vulnerabilities for packages: rancher-fleet, envoy-gateway, k9s, helm-mapkubeapis, k8ssandra-client, linkerd2, eksctl, headlamp, flux, harbor, trivy-operator, flux-source-controller, cluster-api-helm-controller, teleport, cilium-cli, zarf, helm-push, istio, trivy, nova, cerbos, chart-testing,...