GO-2024-2466 vulnerabilities

Vulnerabilities for packages: pulumi-language-java, apko, nuclei, src-fingerprint, kubevela, go-licenses, scorecard, gitsign, gomplate, flux-kustomize-controller, bom, kots, goreleaser, gitness, pulumi, pulumi-kubernetes-operator, pulumi-language-yaml, pulumi-language-dotnet, zot...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: temporal, sigstore-scaffolding, conftest, spire-server, falcosidekick, certificate-transparency, grafana-mimir, kargo, k3s, zarf, fulcio, dex, grpc-health-probe, ksops, kaniko, kube-rbac-proxy, rqlite, tempo, step-ca, cloudnative-pg, dagger, minio, osv-scanner,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: argo-workflows, gptscript, gitea, gitlab-runner, k9s, trufflehog, bom, rancher-fleet, kargo, gitsign, nuclei, crossplane, pulumi, zarf, flux, syft, tfsec, xeol, kaniko, teleport, snyk-cli, grafana-alloy, dagger, apko, osv-scanner, witness, pulumi-language-dotnet,...

GO-2024-2466 vulnerabilities

Vulnerabilities for packages: bom, flux-kustomize-controller, gitsign, nuclei, pulumi, go-licenses, goreleaser, apko, pulumi-language-dotnet, scorecard, zot, pulumi-language-java, src-fingerprint, gitness, kubevela, pulumi-kubernetes-operator, gomplate, kots, pulumi-language-yaml...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: buildkitd, splunk-otel-collector, cilium, helm, kubernetes-dashboard, crossplane-provider-aws-eks, src, nuclei, zarf, syft, step-kms-plugin, act, crossplane-provider-aws-kinesis, crossplane-provider-aws-rds, buildah, trivy, external-secrets-operator, trivy-operator,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: tekton-chains, buildkitd, sigstore-scaffolding, spire-server, flux-kustomize-controller, grafana-mimir, kargo, k3s, gitsign, nuclei, timestamp-authority, pulumi, fulcio, flux, zarf, crossplane-provider-azure-storage, gh, ksops, slsa-verifier, glab, goreleaser,...

CLEANSTART-2026-YB91515 Security fixes in gomplate 4.3.3-r1

Package gomplate version 4.3.3-r1 fixes 3 vulnerabilities: CVE-2026-42507, CVE-2026-42504, CVE-2026-27145...

CLEANSTART-2026-PJ11836 Security fixes in gomplate-fips 4.3.3-r3

Package gomplate-fips version 4.3.3-r3 fixes 4 vulnerabilities: CVE-2025-61729, CVE-2025-61727, ghsa-j5w8-q4qc-rx2x, ghsa-f6x5-jh6r-wrfv...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: grype, pulumi-language-java, argo-events-fips, cloudbeat, kubevela, chainctl-fips, chainloop-cli-fips, apko-fips, gitsign, external-secrets-operator-fips, grype-fips, grafana, kyverno-fips, guac, argocd-image-updater, jfrog-cli, coder, trivy-operator-fips, grype-db,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: grype, pulumi-language-java, argo-events-fips, cloudbeat, kubevela, chainctl-fips, chainloop-cli-fips, apko-fips, gitsign, external-secrets-operator-fips, grype-fips, grafana, kyverno-fips, guac, argocd-image-updater, jfrog-cli, coder, trivy-operator-fips, grype-db,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: grype, pulumi-language-java, argo-events-fips, cloudbeat, kubevela, chainctl-fips, chainloop-cli-fips, apko-fips, gitsign, external-secrets-operator-fips, grype-fips, grafana, kyverno-fips, guac, argocd-image-updater, jfrog-cli, flux-source-controller, coder,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: grype, pulumi-language-java, argo-events-fips, cloudbeat, kubevela, chainctl-fips, chainloop-cli-fips, apko-fips, gitsign, external-secrets-operator-fips, grype-fips, grafana, kyverno-fips, guac, argocd-image-updater, jfrog-cli, flux-source-controller,...

GHSA-XMRV-PMRH-HHX2 vulnerabilities

Vulnerabilities for packages: grype, gitlab-workhorse-ce, crossplane-provider-aws-memorydb-fips, boring-registry, cloudbeat, aws-network-policy-agent-fips, commercial-expanso-edge, falcoctl, aws-otel-collector, docker-fips, crossplane-provider-aws-ecs-fips, keda-fips, chainctl-fips,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: nginx-kubernetes-ingress, boring-registry, sigstore-scaffolding-fips, cloudbeat, commercial-expanso-edge, distribution, gogatekeeper, keda-fips, step-ca, chainctl-fips, nginx-kubernetes-ingress-fips, kyverno-notation-aws, cosign-fips, kserve, agentbeat, nerdctl-fips,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: grype, pulumi-language-java, argo-events-fips, cloudbeat, kubevela, chainctl-fips, apko-fips, gitsign, external-secrets-operator-fips, grype-fips, grafana, kyverno-fips, guac, argocd-image-updater, jfrog-cli, flux-source-controller, trivy-operator-fips, grype-db,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: grype, pulumi-language-java, argo-events-fips, cloudbeat, kubevela, chainctl-fips, apko-fips, gitsign, external-secrets-operator-fips, grype-fips, grafana, kyverno-fips, guac, argocd-image-updater, jfrog-cli, flux-source-controller, trivy-operator-fips, grype-db,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: argo-workflows, gptscript, gitea, gitlab-runner, k9s, trufflehog, bom, rancher-fleet, kargo, gitsign, nuclei, crossplane, pulumi, zarf, flux, syft, tfsec, xeol, kaniko, teleport, snyk-cli, grafana-alloy, dagger, apko, osv-scanner, witness, pulumi-language-dotnet,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: argo-workflows, gptscript, gitea, gitlab-runner, k9s, trufflehog, bom, rancher-fleet, kargo, gitsign, nuclei, crossplane, pulumi, zarf, flux, syft, tfsec, xeol, kaniko, teleport, snyk-cli, grafana-alloy, dagger, apko, osv-scanner, witness, pulumi-language-dotnet,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: argo-workflows, gptscript, gitea, gitlab-runner, k9s, trufflehog, bom, rancher-fleet, kargo, gitsign, nuclei, crossplane, pulumi, zarf, flux, syft, tfsec, xeol, kaniko, teleport, snyk-cli, grafana-alloy, dagger, apko, osv-scanner, witness, pulumi-language-dotnet,...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: argo-workflows, gptscript, gitea, gitlab-runner, k9s, trufflehog, bom, rancher-fleet, kargo, gitsign, nuclei, crossplane, pulumi, zarf, flux, syft, tfsec, xeol, kaniko, teleport, snyk-cli, grafana-alloy, dagger, apko, osv-scanner, witness, pulumi-language-dotnet,...