linkerd2-fips-25.11-controller

Direct Vulnerabilities

Known vulnerabilities in the linkerd2-fips-25.11-controller package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
L Resource Exhaustion	*
L CVE-2026-94447	*
L CVE-2026-94444	*
L CVE-2026-78663	*
L CVE-2026-97031	*
L CVE-2026-97030	*
L CVE-2026-97032	*
L CVE-2026-78660	*
L CVE-2026-56857	*
L CVE-2026-94440	*
L CVE-2026-78659	*
L CVE-2026-78669	*
L CVE-2026-94448	*
L CVE-2026-94439	*
L CVE-2026-56866	*
L CVE-2026-78667	*
L CVE-2026-56851	*
L GHSA-2mjx-qc3c-rqvc	*
L Resource Exhaustion	*
L Server-Side Request Forgery (SSRF)	*
L Information Exposure	*
L Directory Traversal	*
L Resource Exhaustion	*
L Improper Handling of Case Sensitivity	*
L Improper Validation of Array Index	*
L CVE-2026-56855	*
L CVE-2026-78662	*
L Resource Exhaustion	*
L CVE-2026-56854	*
L Race Condition	*
L CVE-2026-56864	*
L CVE-2026-56865	*
L CVE-2026-33818	*
L CVE-2026-56853	*
L CVE-2026-56862	*
L CVE-2026-56860	*
L CVE-2026-56858	*
L CVE-2026-56859	*
L GHSA-259r-337f-4rfw	*
L GHSA-hrxh-6v49-42gf	*
L CVE-2026-46600	*
L CVE-2026-56852	*
L Improper Input Validation	*
L Symlink Following	*
L CVE-2026-50195	*
L GO-2026-5932	*
L CVE-2026-42505	*
L CVE-2026-39822	*
L External Control of File Name or Path	*
L Directory Traversal	*
L Cleartext Transmission of Sensitive Information	*
L GHSA-vh4v-2xq2-g5cg	*
L Server-Side Request Forgery (SSRF)	*
M Memory Leak	*
L Untrusted Search Path	*
L Uncontrolled Memory Allocation	*
H Integer Overflow or Wraparound	*
H Untrusted Search Path	*
H Incorrect Execution-Assigned Permissions	*
L GHSA-65p9-r9h6-22vj	*
L CVE-2026-39821	*
L GHSA-9f94-5g5w-gf6r	*
L GHSA-pwjx-qhcg-rvj4	*
M Directory Traversal	*
L GHSA-82j2-j2ch-gfr8	*
L Improper Certificate Validation	*
L Cross-site Scripting (XSS)	*
L Out-of-Bounds	*
L CVE-2026-46598	*
L GHSA-hfpc-8r3f-gw53	*
L Improper Certificate Validation	*
L Integer Overflow or Wraparound	*
L Improper Restriction of Rendered UI Layers or Frames	*
L GHSA-cq8v-f236-94qc	*
L Improper Restriction of Rendered UI Layers or Frames	*
L Deserialization of Untrusted Data	*
L Improper Verification of Cryptographic Signature	*
L Incorrect Type Conversion or Cast	*
L Missing Authorization	*
L CVE-2026-46595	*
L CVE-2026-39824	*
L GHSA-394x-vwmw-crm3	*
H Loop with Unreachable Exit Condition ('Infinite Loop')	*
L Improper Authorization	*
L Improper Enforcement of Message Integrity During Transmission in a Communication Channel	*
H Integer Overflow to Buffer Overflow	*
L Missing Authorization	*
L GHSA-965h-392x-2mh5	*
L Improper Certificate Validation	*
L Allocation of Resources Without Limits or Throttling	*
L Resource Exhaustion	*
L Improper Restriction of Rendered UI Layers or Frames	*
L GHSA-vw5v-4f2q-w9xf	*
L GHSA-xgp8-3hg3-c2mh	*

linkerd2-fips-25.11-controller

Direct Vulnerabilities

Fix vulnerabilities automatically