25 matches found
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: node-feature-discovery, kyverno, emissary, flux-kustomize-controller, tkn, apisix-ingress-controller, azure-service-operator, cloud-provider-azure, cluster-api-azure-controller, fluent-operator, kubescape, k3s, caddy, gitlab-kas, external-secrets-operator, openbao,...
GO-2025-3367 vulnerabilities
Vulnerabilities for packages: dagger, flux-kustomize-controller, flux, goreleaser, k8sgpt, pulumi-language-java, kargo, k9s, kubescape, skaffold, nuclei, guac, argocd-image-updater, bom, gptscript, kubevela, melange, snyk-cli, zot, gitsign, tfsec, flux-source-controller, argo-events, kots, trivy,...
GO-2025-3368 vulnerabilities
Vulnerabilities for packages: dagger, flux-kustomize-controller, flux, goreleaser, k8sgpt, pulumi-language-java, kargo, k9s, kubescape, skaffold, nuclei, guac, argocd-image-updater, bom, gptscript, kubevela, melange, snyk-cli, zot, gitsign, tfsec, flux-source-controller, argo-events, kots, trivy,...
GO-2026-4910 vulnerabilities
Vulnerabilities for packages: dagger, trufflehog, kyverno, teleport, flux, nfpm, pulumi-language-java, cerbos, kargo, k9s, kubescape, xeol, skaffold, external-secrets-operator, nuclei, trivy-operator, guac, argocd-image-updater, bom, gptscript, kubevela, melange, snyk-cli, zot, gitsign, tfsec,...
GO-2024-2947 vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-sql, k3d, flux-kustomize-controller, flux, rabbitmq-messaging-topology-operator, goreleaser, spire-server, tkn, vexctl, kargo, kubescape, neuvector-sigstore-interface, k3s, timestamp-authority, nuclei, opentelemetry-collector-contrib, guac,...
CLEANSTART-2026-IM94158 Security fixes in pulumi-kubernetes-operator 0.18.0-r1
Package pulumi-kubernetes-operator version 0.18.0-r1 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-1229...
CLEANSTART-2026-WC86090 Security fixes in pulumi-kubernetes-operator 0.18.0-r2
Package pulumi-kubernetes-operator version 0.18.0-r2 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...
CLEANSTART-2026-YM63226 gRPC-Go is the Go language implementation of gRPC
Multiple security vulnerabilities affect the pulumi-kubernetes-operator package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-CK42797 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-1229, CVE-2026-25679, CVE-2026-25934, CVE-2026-27139, CVE-2026-27142, ghsa-37cx-329c-33x3 applied in versions: 0.18.0-r1, 1.16.0-r0
Multiple security vulnerabilities affect the pulumi-kubernetes-operator package. These issues are resolved in later releases. See references for individual vulnerability details...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-kms, docker, pulumi-language-java, cerbos, crossplane-provider-aws-rds, k9s, kubescape, lazygit, nuclei, boring-registry, kubevela, ratify, melange, crossplane-provider-aws-sqs, crossplane-provider-azure-storage, tfsec,...
GHSA-Q9HV-HPM4-HJ6X vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-kms, docker, pulumi-language-java, cerbos, crossplane-provider-aws-rds, k9s, kubescape, lazygit, nuclei, boring-registry, kubevela, ratify, melange, crossplane-provider-aws-sqs, crossplane-provider-azure-storage, tfsec,...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: docker-cli-buildx-fips, omnictl-multiarch, helm, image-factory, grafana-fips, actions-runner-controller, boring-registry-fips, gitsign, melange, flux-helm-controller, snyk-cli, cluster-api, pulumi-kubernetes-operator, trivy-operator,...
CVE-2023-49569 vulnerabilities
Vulnerabilities for packages: gitness, goreleaser, gitsign, scorecard, pulumi-kubernetes-operator, go-licenses, src-fingerprint, nuclei, bom...
CVE-2023-49569 vulnerabilities
Vulnerabilities for packages: bom, scorecard, goreleaser, src-fingerprint, go-licenses, gitsign, gitness, pulumi-kubernetes-operator, nuclei...
GHSA-449P-3H89-PW88 vulnerabilities
Vulnerabilities for packages: gitness, goreleaser, gitsign, scorecard, pulumi-kubernetes-operator, go-licenses, src-fingerprint, nuclei, bom...
GHSA-449P-3H89-PW88 vulnerabilities
Vulnerabilities for packages: bom, scorecard, goreleaser, src-fingerprint, go-licenses, gitsign, gitness, pulumi-kubernetes-operator, nuclei...
GHSA-9763-4F94-GFCH vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-rds, melange, cosign, spire-server-fips, actions-runner-controller, crossplane-provider-aws-iam, crossplane-provider-aws-elasticache, gitsign, kubevela, pulumi-kubernetes-operator, terragrunt, tkn, crossplane-provider-aws-firehose,...
GHSA-3F2Q-6294-FMQ5 vulnerabilities
Vulnerabilities for packages: argo-events-fips, melange, snyk-cli, pulumi-kubernetes-operator, task, flux-notification-controller, argo-events, argo-workflows...