25 matches found
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: hubble, keda, kubernetes, crossplane, rancher, rke2-cloud-provider, gitlab-kas, yunikorn-k8shim, datadog-operator, openbao, tkn, datadog-agent, cluster-api-ipam-provider-in-cluster, tekton-pipelines, kwok, cluster-autoscaler, cluster-api-azure-controller,...
GO-2025-3367 vulnerabilities
Vulnerabilities for packages: goreleaser, syft, tfsec, nuclei, argo-workflows, crossplane, grafana-alloy, grype, guac, pulumi-language-java, flux-source-controller, zarf, wolfictl, k9s, dagger, kubescape, k8sgpt, pulumi-language-yaml, argo-events, skaffold, argocd-image-updater, pulumi,...
GO-2025-3368 vulnerabilities
Vulnerabilities for packages: goreleaser, syft, tfsec, nuclei, argo-workflows, crossplane, grafana-alloy, grype, guac, pulumi-language-java, flux-source-controller, zarf, wolfictl, k9s, dagger, kubescape, k8sgpt, pulumi-language-yaml, argo-events, skaffold, argocd-image-updater, pulumi,...
GO-2026-4910 vulnerabilities
Vulnerabilities for packages: syft, tfsec, nuclei, argo-workflows, crossplane, grafana-alloy, steampipe, trivy-operator, grype, guac, pulumi-language-java, flux-source-controller, gitlab-runner, trufflehog, zarf, wolfictl, k9s, dagger, cerbos, kubescape, teleport, pulumi-language-yaml, argo-event...
GO-2024-2947 vulnerabilities
Vulnerabilities for packages: tekton-chains, k3d, goreleaser, crossplane-provider-azure-managedidentity, nuclei, timestamp-authority, ksops, policy-controller, kubernetes-event-exporter, crossplane-provider-azure-sql, falcoctl, guac, flux-image-reflector-controller, flux-source-controller,...
CLEANSTART-2026-IM94158 Security fixes in pulumi-kubernetes-operator 0.18.0-r1
Package pulumi-kubernetes-operator version 0.18.0-r1 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-1229...
CLEANSTART-2026-WC86090 Security fixes in pulumi-kubernetes-operator 0.18.0-r2
Package pulumi-kubernetes-operator version 0.18.0-r2 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...
CLEANSTART-2026-YM63226 gRPC-Go is the Go language implementation of gRPC
Multiple security vulnerabilities affect the pulumi-kubernetes-operator package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-CK42797 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-1229, CVE-2026-25679, CVE-2026-25934, CVE-2026-27139, CVE-2026-27142, ghsa-37cx-329c-33x3 applied in versions: 0.18.0-r1, 1.16.0-r0
Multiple security vulnerabilities affect the pulumi-kubernetes-operator package. These issues are resolved in later releases. See references for individual vulnerability details...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: cert-manager-cmctl, syft, tfsec, nuclei, crossplane, helm-push, guac, openbao, datadog-agent, k9s, hydra, pulumi-language-yaml, flux-notification-controller, docker-cli-buildx, argo-rollouts, pulumi-kubernetes-operator, gitaly, rclone, cluster-api, snyk-cli,...
GHSA-Q9HV-HPM4-HJ6X vulnerabilities
Vulnerabilities for packages: cert-manager-cmctl, syft, tfsec, nuclei, crossplane, helm-push, guac, openbao, datadog-agent, k9s, hydra, pulumi-language-yaml, flux-notification-controller, docker-cli-buildx, argo-rollouts, pulumi-kubernetes-operator, gitaly, rclone, cluster-api, snyk-cli,...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: argo-cd, terraform-provider-databricks, crossplane-provider-azure-managedidentity, packer, ratify-fips, crossplane-provider-aws-memorydb-fips, gptscript, vault-fips, trivy-fips, nuclei, crossplane-provider-aws-rds, crossplane-provider-keycloak, terragrunt-fips,...
CVE-2023-49569 vulnerabilities
Vulnerabilities for packages: go-licenses, gitness, bom, goreleaser, nuclei, gitsign, pulumi-kubernetes-operator, src-fingerprint, scorecard...
CVE-2023-49569 vulnerabilities
Vulnerabilities for packages: gitness, go-licenses, src-fingerprint, pulumi-kubernetes-operator, gitsign, nuclei, scorecard, goreleaser, bom...
GHSA-449P-3H89-PW88 vulnerabilities
Vulnerabilities for packages: gitness, go-licenses, src-fingerprint, pulumi-kubernetes-operator, gitsign, nuclei, scorecard, goreleaser, bom...
GHSA-449P-3H89-PW88 vulnerabilities
Vulnerabilities for packages: go-licenses, gitness, bom, goreleaser, nuclei, gitsign, pulumi-kubernetes-operator, src-fingerprint, scorecard...
GHSA-9763-4F94-GFCH vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-kinesis, crossplane-provider-aws-cloudfront, spire-server, rclone, policy-controller, crossplane-provider-aws-firehose, crossplane, terraform-provider-google, pulumi-kubernetes-operator, pulumi-language-java, crossplane-provider-family-aws,...
GHSA-3F2Q-6294-FMQ5 vulnerabilities
Vulnerabilities for packages: melange, argo-events-fips, argo-workflows, task, pulumi-kubernetes-operator, flux-notification-controller, snyk-cli, argo-events...