GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: pulumi-language-dotnet, buildah, azuredisk-csi, zarf, docker, scorecard, hubble, cilium-cli, traefik, fuse-overlayfs-snapshotter, vexctl, k8s-device-plugin, timestamp-authority, kubeflow-katib, istio, opentofu, kyverno, dataplaneapi, prometheus, pinact, src, karpente...