Skip to content

Product

linkerd github.com/linkerd/linkerd2 vulnerabilities

2 published CVES affecting linkerd github.com/linkerd/linkerd2, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
0
Medium
1
Low
1
Unscored
0
CISA KEV
0

Latest linkerd github.com/linkerd/linkerd2 CVEs

Newest publication first

  1. CVE-2025-43915 Linkerd resource exhaustion vulnerability

    Published
    MediumCVSS 6.5 EPSS 0.34%

    In Linkerd edge releases before edge-25.2.1, and Buoyant Enterprise for Linkerd releases 2.13.0–2.13.7, 2.14.0–2.14.10, 2.15.0–2.15.7, 2.16.0–2.16.4, and 2.17.0–2.17.1, resource exhaustion can occur for Linkerd proxy metrics.

  2. CVE-2024-40632 Linkerd potential access to the shutdown endpoint

    Published
    LowCVSS 3.7 EPSS 0.44%

    Linkerd is an open source, ultralight, security-first service mesh for Kubernetes. In affected versions when the application being run by linkerd is susceptible to SSRF, an attacker could potentially trigger a denial-of-service (DoS) attack by making requests to localhost:4191/sh...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.