25 matches found
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: cert-manager-webhook-pdns, kubernetes-csi-external-resizer, cloud-provider-azure, flux-notification-controller, kyverno, spqr, helm-operator, kubernetes-csi-external-attacher, kubescape-operator, spicedb, keda, kube-state-metrics, kubernetes, openfga,...
GO-2025-3367 vulnerabilities
Vulnerabilities for packages: kargo, pulumi-language-dotnet, skaffold, bom, nuclei, flux, chezmoi, syft, grafana-alloy, pulumi-language-java, kubevela, go-licenses, dagger, k9s, melange, scorecard, src-fingerprint, flux-image-automation-controller, grype, timoni, kaniko, gitea, trivy, task,...
GO-2025-3368 vulnerabilities
Vulnerabilities for packages: kargo, pulumi-language-dotnet, skaffold, bom, nuclei, flux, chezmoi, syft, grafana-alloy, pulumi-language-java, kubevela, go-licenses, dagger, k9s, melange, scorecard, src-fingerprint, flux-image-automation-controller, grype, timoni, kaniko, gitea, trivy, task,...
GO-2026-4910 vulnerabilities
Vulnerabilities for packages: cerbos, kargo, pulumi-language-dotnet, skaffold, bom, nuclei, rancher-fleet, flux, trivy-operator, gomplate, chezmoi, gitaly, kyverno, syft, nfpm, grafana-alloy, pulumi-language-java, kubevela, trufflehog, k9s, dagger, scorecard, melange, src-fingerprint, steampipe,...
GO-2024-2947 vulnerabilities
Vulnerabilities for packages: k3d, ksops, kargo, terragrunt, flux-notification-controller, opentelemetry-collector-contrib, nuclei, flux, gomplate, actions-runner-controller, skopeo, grafana-mimir, falcoctl, kubevela, sigstore-scaffolding, aactl, spire-server, crossplane-provider-azure,...
CLEANSTART-2026-IM94158 Security fixes in pulumi-kubernetes-operator 0.18.0-r1
Package pulumi-kubernetes-operator version 0.18.0-r1 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-1229...
CLEANSTART-2026-WC86090 Security fixes in pulumi-kubernetes-operator 0.18.0-r2
Package pulumi-kubernetes-operator version 0.18.0-r2 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...
CLEANSTART-2026-YM63226 gRPC-Go is the Go language implementation of gRPC
Multiple security vulnerabilities affect the pulumi-kubernetes-operator package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-CK42797 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-1229, CVE-2026-25679, CVE-2026-25934, CVE-2026-27139, CVE-2026-27142, ghsa-37cx-329c-33x3 applied in versions: 0.18.0-r1, 1.16.0-r0
Multiple security vulnerabilities affect the pulumi-kubernetes-operator package. These issues are resolved in later releases. See references for individual vulnerability details...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-sns, ksops, flux-notification-controller, atlantis, gomplate, kyverno, syft, grafana-alloy, crossplane-provider-aws-cloudwatchlogs, kubevela, trufflehog, terraform-provider-azuread, dagger, src-fingerprint, cilium-cli, gitea,...
GHSA-Q9HV-HPM4-HJ6X vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-sns, ksops, flux-notification-controller, atlantis, gomplate, kyverno, syft, grafana-alloy, crossplane-provider-aws-cloudwatchlogs, kubevela, trufflehog, terraform-provider-azuread, dagger, src-fingerprint, cilium-cli, gitea,...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-eks, cert-manager-cmctl-fips, crossplane-provider-azure-managedidentity, kubescape, crossplane-provider-azure-storage, crossplane-provider-aws-lambda-fips, crossplane-provider-keycloak, crossplane-provider-aws-route53-fips,...
CVE-2023-49569 vulnerabilities
Vulnerabilities for packages: goreleaser, gitness, gitsign, src-fingerprint, pulumi-kubernetes-operator, bom, nuclei, scorecard, go-licenses...
CVE-2023-49569 vulnerabilities
Vulnerabilities for packages: goreleaser, pulumi-kubernetes-operator, bom, nuclei, gitness, go-licenses, scorecard, src-fingerprint, gitsign...
GHSA-449P-3H89-PW88 vulnerabilities
Vulnerabilities for packages: goreleaser, gitness, gitsign, src-fingerprint, pulumi-kubernetes-operator, bom, nuclei, scorecard, go-licenses...
GHSA-449P-3H89-PW88 vulnerabilities
Vulnerabilities for packages: goreleaser, pulumi-kubernetes-operator, bom, nuclei, gitness, go-licenses, scorecard, src-fingerprint, gitsign...
GHSA-9763-4F94-GFCH vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-eks, crossplane-provider-aws-route53, kubescape, gitsign, pulumi-language-java, skaffold, actions-runner-controller, crossplane, crossplane-provider-aws-cloudwatchlogs, wolfictl, gomplate, crossplane-provider-aws-rds, slsa-verifier,...
GHSA-3F2Q-6294-FMQ5 vulnerabilities
Vulnerabilities for packages: argo-events-fips, task, flux-notification-controller, melange, argo-events, pulumi-kubernetes-operator, snyk-cli, argo-workflows...