Linkerd dashboard

October 28, 2026

• Update dependencies to address CVEs:
  • GO-2026-6809 (maps to CVE-2026-111943)
• Update scraping rules expressions to reflect the port renaming in Linkerd (including multi-cluster).

September 28, 2026

• Remove localization support
• Update dependencies to address CVEs:
  • GHSA-vp52-pcj8-j9qc (maps to CVE-2026-84304)
  • GHSA-qc2q-p7wx-3px3 (maps to CVE-2026-84303)
  • GHSA-2v4p-qf9q-27wj (maps to CVE-2026-84445)
  • GO-2026-6355 (maps to CVE-2026-56855)
  • GO-2026-6354 (maps to CVE-2026-78662)
  • GO-2026-6303 (maps to CVE-2026-56854)

August 11, 2026

• Update mTLS report to properly surface CMVP versions for proxies on versions 2.20.1-fips and beyond (and preview-26.8.1-fips and beyond)
• Update dependencies to address CVEs:
  • GHSA-mh99-v99m-4gvg (maps to CVE-2026-14257)
  • GHSA-qwww-vcr4-c8h2
  • GHSA-r28c-9q8g-f849
  • GO-2026-5158 (maps to CVE-2026-41178)
  • GO-2026-5841
  • GHSA-4cwx-7wf7-3272 (maps to CVE-2026-13697)
  • GHSA-8xcm-r25x-g524 (maps to CVE-2026-16728)
  • GHSA-fxqj-rqcc-2cmp (maps to CVE-2026-69153)
  • GHSA-jr45-8vmc-qm54 (maps to CVE-2026-14643)
  • GHSA-m8rv-5g2x-5cg5 (maps to CVE-2026-15157)
  • GHSA-rgw5-rvv9-x895 (maps to CVE-2026-69152)
  • GHSA-v3r7-h72x-cjcm (maps to CVE-2026-16729)
  • GHSA-5p4m-2wfm-xmqj
  • GHSA-28wg-ghj8-5hjv (maps to CVE-2026-67214)
  • GHSA-2v37-7h3g-55p8 (maps to CVE-2026-67213)

July 23, 2026

Breaking changes

Deprecation of dashboard FIPS images

Since inception, Linkerd dashboard’s support for FIPS environments relies on BEL FIPS support. We recently discovered that Linkerd dashboard images with the -fips name extensions were inadvertently published to the container registry. These images were published in error and are no longer being provided as of this release.

Who is affected

Any customer that previously installed Linkerd dashboard by appending -fips to image versions.

What you need to do

Omit -fips from versions and follow the Linkerd dashboard installation instructions.

Fine-grained changelog

• Fix for community page error when there are multiple posts on the same day
• Update dependencies to address CVEs:
  • GHSA-22p9-wv53-3rq4 (maps to CVE-2026-48801)
  • GHSA-fx2h-pf6j-xcff (maps to CVE-2026-53571)
  • GHSA-vmh5-mc38-953g (maps to CVE-2026-9697)
  • GHSA-vxpw-j846-p89q (maps to CVE-2026-12151)
  • GHSA-hm92-r4w5-c3mj (maps to CVE-2026-6734)
  • GHSA-h67p-54hq-rp68 (maps to CVE-2026-53550)
  • GHSA-v6wh-96g9-6wx3 (maps to CVE-2026-53632)
  • GHSA-p88m-4jfj-68fv (maps to CVE-2026-9679)
  • GHSA-pr7r-676h-xcf6 (maps to CVE-2026-9678)
  • GO-2025-3664 (maps to CVE-2025-43915)
  • GO-2026-5970 (maps to CVE-2026-56852)
  • GHSA-v245-v573-v5vm (maps to CVE-2026-59887)
  • GHSA-hrxh-6v49-42gf
  • GHSA-52cp-r559-cp3m (maps to CVE-2026-59869)
  • GHSA-3jxr-9vmj-r5cp (maps to CVE-2026-13149)

June 18, 2026

• Fix for rendering in Gateway page for linkerd-enterprise-multicluster
• Update dependencies to address CVEs:
  • GO-2026-5030 (maps to CVE-2026-27136)
  • GO-2026-5029 (maps to CVE-2026-25681)
  • GO-2026-5028 (maps to CVE-2026-25680)
  • GO-2026-5027 (maps to CVE-2026-42502)
  • GO-2026-5026 (maps to CVE-2026-39821)
  • GO-2026-5025 (maps to CVE-2026-42506)
  • GO-2026-5033 (maps to CVE-2026-46598)
  • GO-2026-5023 (maps to CVE-2026-46595)
  • GO-2026-5021 (maps to CVE-2026-42508)
  • GO-2026-5020 (maps to CVE-2026-39834)
  • GO-2026-5019 (maps to CVE-2026-39831)
  • GO-2026-5018 (maps to CVE-2026-39829)
  • GO-2026-5017 (maps to CVE-2026-39830)
  • GO-2026-5016 (maps to CVE-2026-39827)
  • GO-2026-5015 (maps to CVE-2026-39835)
  • GO-2026-5014 (maps to CVE-2026-39828)
  • GO-2026-5013 (maps to CVE-2026-46597)
  • GO-2026-5006 (maps to CVE-2026-39832)
  • GO-2026-5005 (maps to CVE-2026-39833)
  • GO-2026-4918 (maps to CVE-2026-33814)
  • GHSA-jxxr-4gwj-5jf2 (maps to CVE-2026-45149)

May 15, 2026

• Update dependencies to address CVEs
  • GHSA-qx2v-qp2m-jg93 (maps to CVE-2026-41305)
  • GHSA-pc3f-x583-g7j2 (maps to CVE-2026-35469)
  • GHSA-hr2v-4r36-88hr (maps to CVE-2026-35206)
  • GHSA-hfvc-g4fc-pqhx (maps to CVE-2026-39883)

April 9, 2026

• Add support for setting a base URL
• Update dependencies to address CVEs

March 19, 2026

• Fix UI issues with Linkerd Check modal
• Add parameter to configure the replica count when deploying the dashboard
• Prevent dashboard from crashing when encountering UI rendering errors
• Update dependencies to address CVEs

February 17, 2026

• Fix frontend rendering issue on mTLS page
• Update dependencies to address CVEs

January 30, 2026

• Fix frontend styling issues

January 30, 2026

• Combine HTTP and TCP metrics into a single view
• Improve table filtering
• Update dependencies to address CVEs

January 13, 2026

• Fixed BEL version check

December 23, 2025

• Fix Gateways section that was showing up empty
• Enable main navigation panel to be collapsed
• Improve security scanning coverage for javascript dependencies

December 10, 2025

• Add additional traffic details to the mTLS page, such as the TLS version cryptographic library, cipher suite, and CMVP number (for FIPS connections)
• Improve UI of Overview page
• Add ability to set resource limits and requests via the Helm chart values
• Add ability to set annotations via the Helm chart values
• Update dependencies to address CVEs

September 26, 2025

• Added mTLS and FIPS reporting. The dashboard now provides a view of the TLS and FIPS status of traffic within a specified scope over a period of time, and includes the ability to export the results as CSV.

helm upgrade -i -n monitoring --create-namespace \
    linkerd-dashboard oci://ghcr.io/buoyantio/charts/linkerd-dashboard