Vulnerabilities

TI-2025-28482 CVE-2025-43915 · GHSA-42mr-jpwh-m9rv

In Linkerd edge releases before edge-25.2.1, and Buoyant Enterprise for Linkerd releases…

LOW 29

In Linkerd edge releases before edge-25.2.1, and Buoyant Enterprise for Linkerd releases 2.13.0–2.13.7, 2.14.0–2.14.10, 2.15.0–2.15.7, 2.16.0–2.16.4, and 2.17.0–2.17.1, resource exhaustion can occur for Linkerd proxy met…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00336 Published 2025-05-05 Fixed in 0.0.0-20250212165942-faa3f617eef5 CWE-400

TI-2024-27044 CVE-2024-40632

Linkerd potential access to the shutdown endpoint

LOW 18

Linkerd is an open source, ultralight, security-first service mesh for Kubernetes.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00444 Published 2024-07-15 No fix listed CWE-918

TI-2023-23979 CVE-2023-44487 · GHSA-qppj-fm5r-hxr3

The HTTP/2 protocol allows a denial of service (server resource consumption) because…

CRITICAL 90KEV

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.99999 Published 2023-10-10 Partial fix · 1.28.0, 0.17.0 +9 CWE-400

Vulnerabilities

Filters

In Linkerd edge releases before edge-25.2.1, and Buoyant Enterprise for Linkerd releases…

Linkerd potential access to the shutdown endpoint

The HTTP/2 protocol allows a denial of service (server resource consumption) because…