GO-2026-5039 vulnerabilities

Vulnerabilities for packages: pulumi-language-java, manifest-tool, slsa-verifier, speedtest-go, zarf, kubernetes-csi-external-provisioner, q, crossplane-provider-azure-storage, gitlab-runner, kserve, kube-fluentd-operator, nri-haproxy, harbor-registry, ingress-nginx-controller, src-fingerprint,...