CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: kargo, bom, gitsign, rancher-fleet, k9s, pulumi-language-java, gomplate, chezmoi, grafana, nfpm, pulumi-language-yaml, gitea, nuclei, tfsec, melange, pulumi, external-secrets-operator, apko, gitaly, zarf, xeol, gptscript, flux-source-controller, kubevela, witness,...

PT-2026-23725

Name of the Vulnerable Software and Affected Versions Zarf versions 0.54.0 through 0.73.0 Description Zarf, an Airgap Native Packager Manager for Kubernetes, contains a path traversal flaw in its archive extraction process. A specially designed Zarf package can create symbolic links that point to...