CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: apko-fips, gitsign, rancher-fleet-fips, flux-source-controller, gitaly-fips, trufflehog, bom, flux, gitea, grype-db, kyverno, nemo, syft, grype-fips, commercial-chainloop-cli, pulumi-kubernetes-operator, argo-workflows-fips, crossplane-fips, trufflehog-fips,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: apko-fips, gitsign, rancher-fleet-fips, flux-source-controller, gitaly-fips, trufflehog, bom, flux, gitea, grype-db, kyverno, nemo, syft, grype-fips, commercial-chainloop-cli, pulumi-kubernetes-operator, argo-workflows-fips, crossplane-fips, trufflehog-fips,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: bom, teleport, chezmoi, kargo, pulumi, tfsec, kyverno, pulumi-language-java, flux, external-secrets-operator, argocd-image-updater, guac, kots, melange, src-fingerprint, trivy, rancher-fleet, argo-events, kaniko, skaffold, wolfictl, pulumi-language-dotnet, crossplane...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: bom, teleport, chezmoi, kargo, pulumi, tfsec, kyverno, pulumi-language-java, flux, external-secrets-operator, argocd-image-updater, guac, kots, melange, src-fingerprint, trivy, rancher-fleet, argo-events, kaniko, skaffold, wolfictl, pulumi-language-dotnet, crossplane...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: bom, teleport, chezmoi, kargo, pulumi, tfsec, kyverno, pulumi-language-java, flux, external-secrets-operator, argocd-image-updater, guac, kots, melange, src-fingerprint, trivy, rancher-fleet, argo-events, kaniko, skaffold, wolfictl, pulumi-language-dotnet, crossplane...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: bom, teleport, chezmoi, kargo, pulumi, tfsec, kyverno, pulumi-language-java, flux, external-secrets-operator, argocd-image-updater, guac, kots, melange, src-fingerprint, trivy, rancher-fleet, argo-events, kaniko, skaffold, wolfictl, pulumi-language-dotnet, crossplane...

GO-2026-4737 Terraform Provider for ArgoCD has possible exposure to GO-2026-4337 / CVE-2025-68121 in github.com/argoproj-labs/terraform-provider-argocd

Terraform Provider for ArgoCD has possible exposure to GO-2026-4337 / CVE-2025-68121 in github.com/argoproj-labs/terraform-provider-argocd...

GHSA-594F-3595-C47V Terraform Provider for ArgoCD has possible exposure to GO-2026-4337 / CVE-2025-68121

Summary The terraform-provider-argocd might have been vulnerable to GO-2026-4337 / CVE-2025-68121 "Unexpected session resumption in crypto/tls". Details See https://pkg.go.dev/vuln/GO-2026-4337 for the upstream vulnerability. Provider versions starting with v7.15.1 are using go 1.25.8 for buildin...

CVE-2026-24051 vulnerabilities

Vulnerabilities for packages: node-feature-discovery, spicedb-fips, blob-csi, secrets-store-csi-driver-provider-gcp, kong-ingress-controller, kubernetes-csi-external-health-monitor, prometheus-alertmanager, falcosidekick, cass-operator-fips-no-pvc-delete, temporal, pulumi-kubernetes-operator,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: node-feature-discovery, spicedb-fips, blob-csi, secrets-store-csi-driver-provider-gcp, kong-ingress-controller, kubernetes-csi-external-health-monitor, prometheus-alertmanager, falcosidekick, cass-operator-fips-no-pvc-delete, temporal, pulumi-kubernetes-operator,...

CLEANSTART-2026-LS98939 go-git is a highly extensible git implementation library written in pure Go

Multiple security vulnerabilities affect the argo-cd-fips package. go-git is a highly extensible git implementation library written in pure Go. See references for individual vulnerability details...

CLEANSTART-2026-YW12690 go-git is a highly extensible git implementation library written in pure Go

Multiple security vulnerabilities affect the argo-cd-fips package. go-git is a highly extensible git implementation library written in pure Go. See references for individual vulnerability details...

CLEANSTART-2026-QC30410 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the argo-cd-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

CLEANSTART-2026-WP10148 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the argo-cd-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

CLEANSTART-2026-AC12204 go-git is a highly extensible git implementation library written in pure Go

Multiple security vulnerabilities affect the argo-cd-fips package. go-git is a highly extensible git implementation library written in pure Go. See references for individual vulnerability details...

CLEANSTART-2026-AJ16639 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the argo-cd-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

CLEANSTART-2026-FF98917 go-git is a highly extensible git implementation library written in pure Go

Multiple security vulnerabilities affect the argo-cd package. go-git is a highly extensible git implementation library written in pure Go. See references for individual vulnerability details...

CLEANSTART-2026-ER93728 go-git is a highly extensible git implementation library written in pure Go

Multiple security vulnerabilities affect the argo-cd-fips package. go-git is a highly extensible git implementation library written in pure Go. See references for individual vulnerability details...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: pulumi, tfsec, cilium-cli, ksops, pulumi-language-java, flux, argocd-image-updater, crossplane-provider-aws-firehose, crossplane-provider-aws-sns, kots, skaffold, pulumi-language-dotnet, crossplane-provider-aws-elasticache, crossplane, crossplane-provider-aws-memoryd...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: pulumi, tfsec, cilium-cli, ksops, pulumi-language-java, flux, argocd-image-updater, crossplane-provider-aws-firehose, crossplane-provider-aws-sns, kots, skaffold, pulumi-language-dotnet, crossplane-provider-aws-elasticache, crossplane, crossplane-provider-aws-memoryd...