GO-2026-6258 vulnerabilities

Vulnerabilities for packages: tempo-fips, cortex, cortex-fips, thanos-receive-controller, thanos-receive-controller-fips, tempo, thanos-fips, thanos, pulumi-language-yaml, cortex-geomys-fips...

GO-2026-6258 vulnerabilities

Vulnerabilities for packages: thanos, pulumi-language-yaml, cortex...

GO-2026-6090 vulnerabilities

Vulnerabilities for packages: node-feature-discovery, prometheus-alertmanager, sriov-network-device-plugin, trino, nri-mongodb, descheduler, tekton-chains, dapr, kubescape-operator, cloud-provider-azure, cerbos, aws-privateca-issuer, victoriametrics, gh, pgtimetable, nri-kubernetes, bank-vaults,...

CVE-2026-56862 vulnerabilities

Vulnerabilities for packages: node-feature-discovery, prometheus-alertmanager, sriov-network-device-plugin, trino, nri-mongodb, descheduler, tekton-chains, dapr, kubescape-operator, cloud-provider-azure, cerbos, aws-privateca-issuer, victoriametrics, gh, pgtimetable, nri-kubernetes, bank-vaults,...

GO-2026-6218 vulnerabilities

Vulnerabilities for packages: node-feature-discovery, prometheus-alertmanager, sriov-network-device-plugin, trino, descheduler, tekton-chains, dapr, kubescape-operator, cloud-provider-azure, cerbos, aws-privateca-issuer, victoriametrics, gh, pgtimetable, nri-kubernetes, bank-vaults,...

CVE-2026-56860 vulnerabilities

Vulnerabilities for packages: node-feature-discovery, prometheus-alertmanager, sriov-network-device-plugin, trino, descheduler, tekton-chains, dapr, kubescape-operator, cloud-provider-azure, cerbos, aws-privateca-issuer, victoriametrics, gh, pgtimetable, nri-kubernetes, bank-vaults,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: cluster-api-fips, onepassword-operator, skopeo, kaf, prometheus-adapter, dataplaneapi-fips, argo-workflows-fips, mariadb-operator, terraform-provider-databricks-fips, bento-fips, go-discover-fips, ingress-nginx-controller-fips, step-fips, hydra-fips,...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: minio-operator, skopeo, kaf, prometheus-adapter, croc, argo-workflows-fips, q, go-discover-fips, step-fips, thanos-fips, openbao, crossplane-provider-sql-fips, rqlite, cluster-autoscaler-fips, kubeflow-katib, memcached-exporter, fulcio, docker-compose-fips,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: nuclei, tfsec, pulumi-language-dotnet, zarf, argocd-image-updater, pulumi-language-yaml, gptscript, flux-source-controller, flux-image-automation-controller, osv-scanner, syft, wolfictl, bom, zot, kots, k9s, argo-events, melange, kubescape, chezmoi, kubevela, task,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: xeol, nuclei, tfsec, pulumi-language-dotnet, zarf, teleport, argo-cd, argocd-image-updater, pulumi-language-yaml, gptscript, flux-source-controller, nfpm, flux-image-automation-controller, trivy-operator, osv-scanner, syft, wolfictl, gomplate, bom, witness, steampipe...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: nuclei, tfsec, pulumi-language-dotnet, zarf, argocd-image-updater, pulumi-language-yaml, gptscript, flux-source-controller, flux-image-automation-controller, osv-scanner, syft, wolfictl, bom, zot, kots, k9s, argo-events, melange, kubescape, chezmoi, kubevela, task,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: zarf, crossplane-provider-azure-sql, gatus, crossplane-provider-aws-sqs, flux-source-controller, tekton-chains, fulcio, docker-cli-buildx, flux-image-automation-controller, trivy-operator, crossplane-provider-aws-route53, osv-scanner, external-dns, loki,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: xeol, nuclei, tfsec, pulumi-language-dotnet, zarf, teleport, argo-cd, argocd-image-updater, pulumi-language-yaml, gptscript, flux-source-controller, act, nfpm, flux-image-automation-controller, trivy-operator, osv-scanner, syft, wolfictl, gomplate, bom, witness,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: nfpm, gomplate-fips, flux-image-automation-controller, argo-workflows-fips, tfsec, packer-fips, coder, grafana-fips, pulumi-language-dotnet, trufflehog, kargo, dagger, flux-fips, skaffold-fips, kaniko-fips, argo-events-fips, cerbos, chainloop-cli-fips, mapotf-fips,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: nfpm, gomplate-fips, flux-image-automation-controller, argo-workflows-fips, tfsec, packer-fips, coder, grafana-fips, pulumi-language-dotnet, trufflehog, kargo, dagger, flux-fips, skaffold-fips, kaniko-fips, argo-events-fips, cerbos, chainloop-cli-fips, mapotf-fips,...

CLEANSTART-2026-FO49462 Security fixes for ghsa-3xc5-wrhm-f963 applied in versions: 1.31.1-r0

Security vulnerability affects the pulumi-language-yaml package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-36553

Security vulnerability affects the pulumi-language-yaml package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: nfpm, gomplate-fips, flux-image-automation-controller, argo-workflows-fips, tfsec, packer-fips, pulumi-language-dotnet, grafana-fips, trufflehog, kargo, dagger, flux-fips, skaffold-fips, kaniko-fips, livekit-cli, argo-events-fips, cerbos, gitaly, xeol-fips,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: nfpm, gomplate-fips, flux-image-automation-controller, argo-workflows-fips, tfsec, packer-fips, pulumi-language-dotnet, grafana-fips, trufflehog, kargo, dagger, flux-fips, skaffold-fips, kaniko-fips, livekit-cli, argo-events-fips, cerbos, gitaly, xeol-fips,...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: xeol, nuclei, tfsec, pulumi-language-dotnet, zarf, teleport, argo-cd, argocd-image-updater, pulumi-language-yaml, gptscript, flux-source-controller, nfpm, flux-image-automation-controller, trivy-operator, osv-scanner, syft, wolfictl, gomplate, bom, witness, steampipe...