linkerd2-proxy-identity

5 results · Clear filters · Feed

• High 8.8
  CVE-2026-27140

  Code execution vulnerability in SWIG code generation in cmd/go

  SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass.

  Go toolchain cmd/go renovate golang Debian Ubuntu Azure Linux Alpine Wolfi Go
  Apr 8, 2026
• High 8.6
  CVE-2025-61732

  Potential code smuggling via doc comments in cmd/cgo

  A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary.

  Go toolchain cmd/cgo langfuse-3-worker katib-suggestion-hyperopt Debian Ubuntu Azure Linux Alpine Wolfi Go
  Feb 5, 2026
• High 8.5
  CVE-2025-53547 Public exploit

  Helm Chart Dependency Updating With Malicious Chart.yaml Content And Symlink Can Lead To Code Execution

  Helm is a package manager for Charts for Kubernetes. Prior to 3.18.4, a specially crafted Chart.yaml file along with a specially linked Chart.lock file can lead to local code execution when dependencies are updated. Fields in a Chart.yaml file, that are carri…

  helm helm zot kots Azure Linux Alpine Wolfi Go
  Jul 8, 2025
• High 7.5
  CVE-2025-22874

  Usage of ExtKeyUsageAny disables policy validation in crypto/x509

  Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected certificate chains which contain policy graphs, which are rather uncommon.

  Go standard library crypto/x509 golang go Debian Ubuntu Azure Linux Alpine Wolfi Go
  Jun 11, 2025
• High 7.5
  CVE-2025-22868

  Unexpected memory consumption during token parsing in golang.org/x/oauth2

  An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.

  golang.org/x/oauth2 golang.org/x/oauth2/jws katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Wolfi Go
  Feb 26, 2025