GO-2026-5381 vulnerabilities

Vulnerabilities for packages: cloud-sql-proxy, splunk-otel-collector, node-problem-detector, opentelemetry-collector-contrib, fluent-bit-plugin-loki, certificate-transparency, minio-object-browser, jaeger, loki, opentelemetry-operator, keda, minio-operator, minio, istio,...

ddev (>=1.4.2 <=2.1.0), hoppr (>=1.7.0 <=1.13.2) +2 more potentially affected by unknown CVE via in-toto (>=1.0.1 <=1.4.0)

in-toto PYPI version =1.0.1, =1.4.2, =1.7.0, =1.0.18, =1.4.9 - hoppr-openssf-scorecard =0.0.1 Source cves: unknown CVE Source advisory: OSV:GHSA-JJGP-WHRP-GQ8M...

ddev (>=1.4.2 <=2.1.0), hoppr (>=1.7.0 <=1.13.2) +2 more potentially affected by CVE-2023-32076 via in-toto (>=1.0.1 <=1.4.0)

in-toto PYPI version =1.0.1, =1.4.2, =1.7.0, =1.0.18, =1.4.9 - hoppr-openssf-scorecard =0.0.1 Source cves: CVE-2023-32076 Source advisory: OSV:GHSA-WC64-C5RV-32PF...

ddev (>=1.4.2 <=2.1.0), hoppr (>=1.7.0 <=1.13.2) +2 more potentially affected by CVE-2023-32076 via in-toto (>=1.0.1 <=1.4.0)

in-toto PYPI version =1.0.1, =1.4.2, =1.7.0, =1.0.18, =1.4.9 - hoppr-openssf-scorecard =0.0.1 Source cves: CVE-2023-32076 Source advisory: OSV:PYSEC-2023-63...