CVE-2025-43915

Medium

Advisory

Published 5 May 2025In the index since 8 Sept 2026

Linkerd resource exhaustion vulnerability

Carried by container images the latest versions of 3 of 17,781 indexed charts deploy, on 3 images.

Affected package	Affected versions	Fixed in	Images
github.com/linkerd/linkerd2golang	v0.0.0-20190221030352-5e47cb150a33, v0.5.1-0.20200402173539-fee70c064bc0, v0.5.1-0.20260615155958-5861fb59158a	0.0.0-20250212165942-faa3f617eef5	3

3 by stars

Chart

Latest

Affected images

Radar Score

1 of the 2 container images this version deploys carry CVE-2025-43915.

Container image	Digest	Package	Fixed in
ghcr.io/buoyantio/linkerd-dashboard-server :0.11.1	dd6a29588242	github.com/linkerd/linkerd2@v0.5.1-0.20260615155958-5861fb59158a	no fix listed

1,037

flaggermesosphere

1 of the 2 container images this version deploys carry CVE-2025-43915.

Container image	Digest	Package	Fixed in
weaveworks/flagger :0.19.0	a9c2e9df4227	github.com/linkerd/linkerd2@v0.0.0-20190221030352-5e47cb150a33	0.0.0-20250212165942-faa3f617eef5

6,048

gloo-meshsolo-gloo-mesh

1 of the 1 container images this version deploys carry CVE-2025-43915.

Container image	Digest	Package	Fixed in
gcr.io/gloo-mesh/gloo-mesh :1.1.2	a4011eae6a0b	github.com/linkerd/linkerd2@v0.5.1-0.20200402173539-fee70c064bc0	no fix listed

3,257

3 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
weaveworks/flagger :0.19.0	a9c2e9df4227	github.com/linkerd/linkerd2@v0.0.0-20190221030352-5e47cb150a33	0.0.0-20250212165942-faa3f617eef5	1
gcr.io/gloo-mesh/gloo-mesh :1.1.2	a4011eae6a0b	github.com/linkerd/linkerd2@v0.5.1-0.20200402173539-fee70c064bc0	no fix listed	1
ghcr.io/buoyantio/linkerd-dashboard-server :0.11.1	dd6a29588242	github.com/linkerd/linkerd2@v0.5.1-0.20260615155958-5861fb59158a	no fix listed	1