GO-2026-6090 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, kubescape-operator, nginx-prometheus-exporter, trillian, helm-mapkubeapis, haproxy-ingress, skaffold, cloudprober, ghaudit, argo-workflows, k9s, rancher-telemetry, knative-serving, mcp-grafana, flux-kustomize-controller, harbor-cli,...

CVE-2026-56862 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, kubescape-operator, nginx-prometheus-exporter, trillian, helm-mapkubeapis, haproxy-ingress, skaffold, cloudprober, ghaudit, argo-workflows, k9s, rancher-telemetry, knative-serving, mcp-grafana, flux-kustomize-controller, harbor-cli,...

CVE-2026-56860 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, kubescape-operator, nginx-prometheus-exporter, sbom-convert, trillian, helm-mapkubeapis, haproxy-ingress, skaffold, cloudprober, ghaudit, argo-workflows, k9s, rancher-telemetry, knative-serving, mcp-grafana, flux-kustomize-controller, harbor-cli...

GO-2026-6218 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, kubescape-operator, nginx-prometheus-exporter, sbom-convert, trillian, helm-mapkubeapis, haproxy-ingress, skaffold, cloudprober, ghaudit, argo-workflows, k9s, rancher-telemetry, knative-serving, mcp-grafana, flux-kustomize-controller, harbor-cli...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: prometheus-adapter, terraform-provider-tls, tetragon, gitlab-operator, kserve, helm-diff, k8s-metacollector, google-guest-agent, crossplane-provider-aws-s3, k8s-metacollector-fips, longhorn-share-manager-fips, longhorn-backing-image-manager-fips, cerbos, rook,...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: helm-push, prometheus-adapter, terraform-provider-tls, kserve, consul-k8s, google-guest-agent, descheduler, crossplane-provider-aws-s3, spire-server, kafkaexporter-fips, rekor-fips, dagdotdev, fulcio, crossplane-provider-aws, go-discover, rook, cadvisor-fips,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: snyk-cli, skaffold, flux-image-automation-controller, kots, argo-workflows, k9s, gitea, grype, flux-kustomize-controller, tfsec, melange, timoni, crossplane, gitsign, zot, flux, trivy, osv-scanner, kaniko, bom, apko, scorecard, k8sgpt, task, syft, zarf,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: snyk-cli, skaffold, flux-image-automation-controller, kots, argo-workflows, k9s, gitea, grype, flux-kustomize-controller, tfsec, melange, timoni, crossplane, gitsign, zot, flux, trivy, osv-scanner, kaniko, bom, apko, scorecard, k8sgpt, task, syft, zarf,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: snyk-cli, external-secrets-operator, gomplate, xeol, gitlab-runner, flux-image-automation-controller, skaffold, kots, teleport, argo-workflows, k9s, gitea, argo-cd, kyverno, nfpm, grype, tfsec, melange, crossplane, gitsign, zot, flux, trivy, osv-scanner, kaniko, bom,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: snyk-cli, terraform-provider-acme, gomplate, gitlab-runner, skaffold, crossplane-provider-azure-authorization, kots, k9s, knative-serving, flux-kustomize-controller, flux, atlantis, crossplane-provider-aws-sqs, datadog-agent, telegraf, eksctl, podman, scorecard,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: snyk-cli, external-secrets-operator, gomplate, xeol, gitlab-runner, flux-image-automation-controller, skaffold, kots, teleport, argo-workflows, k9s, gitea, argo-cd, kyverno, nfpm, grype, tfsec, melange, crossplane, gitsign, zot, flux, trivy, osv-scanner, kaniko, bom,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: argo-events-fips, k9s-fips, packer, nemo, dagger, pulumi-language-dotnet, flux-source-controller, kyverno-fips, gitea-fips, grafana-fips, chainloop-cli, cerbos, skaffold-fips, steampipe, packer-fips, trivy, src-fingerprint, jfrog-cli, grafana-alloy, kubevela-fips,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: argo-events-fips, k9s-fips, packer, nemo, dagger, pulumi-language-dotnet, flux-source-controller, kyverno-fips, gitea-fips, grafana-fips, chainloop-cli, cerbos, skaffold-fips, steampipe, packer-fips, trivy, src-fingerprint, jfrog-cli, grafana-alloy, kubevela-fips,...

CLEANSTART-2026-FO49462 Security fixes for ghsa-3xc5-wrhm-f963 applied in versions: 1.31.1-r0

Security vulnerability affects the pulumi-language-yaml package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: argo-events-fips, k9s-fips, packer, nemo, dagger, pulumi-language-dotnet, flux-source-controller, kyverno-fips, gitea-fips, grafana-fips, cerbos, skaffold-fips, steampipe, packer-fips, trivy, src-fingerprint, jfrog-cli, grafana-alloy, kubevela-fips, nfpm, chezmoi,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: argo-events-fips, k9s-fips, packer, nemo, dagger, pulumi-language-dotnet, flux-source-controller, kyverno-fips, gitea-fips, grafana-fips, cerbos, skaffold-fips, steampipe, packer-fips, trivy, src-fingerprint, jfrog-cli, grafana-alloy, kubevela-fips, nfpm, chezmoi,...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: snyk-cli, external-secrets-operator, gomplate, xeol, gitlab-runner, flux-image-automation-controller, skaffold, kots, teleport, argo-workflows, k9s, gitea, argo-cd, kyverno, nfpm, grype, tfsec, melange, crossplane, gitsign, zot, flux, trivy, osv-scanner, kaniko, bom,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: snyk-cli, external-secrets-operator, gomplate, xeol, gitlab-runner, flux-image-automation-controller, skaffold, kots, teleport, argo-workflows, k9s, gitea, argo-cd, kyverno, nfpm, grype, tfsec, melange, crossplane, gitsign, zot, flux, trivy, osv-scanner, kaniko, bom,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: snyk-cli, external-secrets-operator, gomplate, xeol, gitlab-runner, flux-image-automation-controller, skaffold, kots, teleport, argo-workflows, k9s, gitea, argo-cd, kyverno, nfpm, grype, tfsec, melange, crossplane, gitsign, zot, flux, trivy, osv-scanner, kaniko, bom,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: snyk-cli, external-secrets-operator, gomplate, xeol, gitlab-runner, flux-image-automation-controller, skaffold, kots, teleport, argo-workflows, k9s, gitea, argo-cd, kyverno, nfpm, grype, tfsec, melange, crossplane, gitsign, zot, flux, trivy, osv-scanner, kaniko, bom,...