CLEANSTART-2026-YM63226 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the pulumi-kubernetes-operator package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

CLEANSTART-2026-CK42797 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-1229, CVE-2026-25679, CVE-2026-25934, CVE-2026-27139, CVE-2026-27142, ghsa-37cx-329c-33x3 applied in versions: 0.18.0-r1, 1.16.0-r0

Multiple security vulnerabilities affect the pulumi-kubernetes-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: docker, pulumi-language-java, grafana-alloy, pulumi, terraform-provider-pagerduty, rclone, crossplane-provider-aws-lambda, sops, flux-notification-controller, aactl, terraform-provider-azuread, src-fingerprint, crossplane-provider-aws-kms, cerbos,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: docker, pulumi-language-java, grafana-alloy, pulumi, terraform-provider-pagerduty, rclone, crossplane-provider-aws-lambda, sops, flux-notification-controller, aactl, terraform-provider-azuread, src-fingerprint, crossplane-provider-aws-kms, cerbos,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: gitness, kubevela-fips, policy-controller, atlantis, flux-helm-controller, crossplane-provider-aws-ec2, argo-cd-fips, crossplane-provider-aws-sns, pulumi-language-yaml, pulumi-language-dotnet, cluster-api, trivy-operator, trivy, external-secrets-operator,...

CVE-2023-49569 vulnerabilities

Vulnerabilities for packages: bom, pulumi-kubernetes-operator, gitsign, go-licenses, goreleaser, src-fingerprint, gitness, nuclei, scorecard...

CVE-2023-49569 vulnerabilities

Vulnerabilities for packages: gitness, gitsign, src-fingerprint, scorecard, bom, goreleaser, go-licenses, nuclei, pulumi-kubernetes-operator...

GHSA-449P-3H89-PW88 vulnerabilities

Vulnerabilities for packages: gitness, gitsign, src-fingerprint, scorecard, bom, goreleaser, go-licenses, nuclei, pulumi-kubernetes-operator...

GHSA-449P-3H89-PW88 vulnerabilities

Vulnerabilities for packages: bom, pulumi-kubernetes-operator, gitsign, go-licenses, goreleaser, src-fingerprint, gitness, nuclei, scorecard...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: gitness, falcoctl-fips, flux, policy-controller, kaniko, crossplane-provider-aws-kinesis, kubevela, crossplane-provider-aws-ec2, flux-image-automation-controller, flux-notification-controller, crossplane-provider-aws-elasticache, crossplane-provider-aws-sns,...

GHSA-3F2Q-6294-FMQ5 vulnerabilities

Vulnerabilities for packages: task, melange, argo-events, snyk-cli, flux-notification-controller, argo-events-fips, pulumi-kubernetes-operator, argo-workflows...

GHSA-3F2Q-6294-FMQ5 vulnerabilities

Vulnerabilities for packages: snyk-cli, melange, pulumi-kubernetes-operator, task, flux-notification-controller, argo-events, argo-workflows...

CVE-2023-46402 vulnerabilities

Vulnerabilities for packages: task, melange, argo-events, snyk-cli, flux-notification-controller, argo-events-fips, pulumi-kubernetes-operator, argo-workflows...

CVE-2023-46402 vulnerabilities

Vulnerabilities for packages: snyk-cli, melange, pulumi-kubernetes-operator, task, flux-notification-controller, argo-events, argo-workflows...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: falcoctl-fips, src, kubevela, prometheus-blackbox-exporter, bank-vaults-fips, up, kubernetes-csi-livenessprobe-fips, kiam, vault-csi-provider, buildkitd, kubeflow, timestamp-authority-fips, scorecard, prometheus-adapter-fips, metrics-server-fips, dgraph, kubescape,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: buildkitd, k3d, terraform-provider-sendgrid, aactl, kubescape, dgraph, slsa-verifier, spark-operator, kubeflow, prometheus-blackbox-exporter, cortex, up, kubevela, src, scorecard...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: gitness, atlantis, flux-helm-controller, aws-ebs-csi-driver, k8sgpt-operator, bank-vaults-fips, up, kiam, pulumi-language-yaml, prometheus-elasticsearch-exporter-fips, prometheus-postgres-exporter, pulumi-language-dotnet, k3s, helm, newrelic-infrastructure-agent,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, pulumi-language-java, newrelic-infrastructure-agent, pulumi, kind, cue, src, kubeflow, aws-efs-csi-driver, flux-notification-controller, aactl, terraform-provider-aws, gobuster, haproxy-ingress, nats, terraform-provider-azurerm,...