go package report

Is github.com/linkerd/linkerd2 safe?

1 known vulnerability, worst severity MEDIUM.

cvss

6.5

how bad it is if exploited, out of 10

epss

0.30%

chance of exploitation in the next 30 days

xyz score

not scored

CyberXYZ composite, out of 10

fig. 01 — GHSA-42mr-jpwh-m9rv, the advisory selected below

// advisories

GHSA-42mr-jpwh-m9rv

MEDIUMCVE-2025-43915

In Linkerd edge releases before edge-25.2.1, and Buoyant Enterprise for Linkerd releases 2.13.0–2.13.7, 2.14.0–2.14.10, 2.15.0–2.15.7, 2.16.0–2.16.4, and 2.17.0–2.17.1, resource exhaustion can occur for Linkerd proxy metrics.

Affected: >=0
Fixed in: 0.0.0-20250212165942-faa3f617eef5
Weakness: CWE-400
Published: 2025-05-05
Source: github

GHSA NVD MITRE

// dependencies

0 direct

// ai model usage

Tracked for PyPI packages. HuggingFace models declare Python dependencies, so go packages are not covered.

Checked 2026-09-22 at 00:38 UTC. The most recent advisory here was published 2025-05-05. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Is github.com/linkerd/linkerd2 safe? go package security report | CyberXYZ