Package · Wolfi

linkerd2

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

High 8.5

CVE-2025-53547 Public exploit

Helm Chart Dependency Updating With Malicious Chart.yaml Content And Symlink Can Lead To Code Execution

Helm is a package manager for Charts for Kubernetes. Prior to 3.18.4, a specially crafted Chart.yaml file along with a specially linked Chart.lock file can lead to local code execution when dependencies are updated. Fields in a Chart.yaml file, that are carri…

helm helm zot kots Azure Linux Alpine Wolfi Go

Jul 8, 2025
High 7.5

CVE-2025-22874

Usage of ExtKeyUsageAny disables policy validation in crypto/x509

Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected certificate chains which contain policy graphs, which are rather uncommon.

Go standard library crypto/x509 golang go Debian Ubuntu Azure Linux Alpine Wolfi Go

Jun 11, 2025
High 7.5

CVE-2025-22868

Unexpected memory consumption during token parsing in golang.org/x/oauth2

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.

golang.org/x/oauth2 golang.org/x/oauth2/jws katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Wolfi Go

Feb 26, 2025