GO-2024-2466 vulnerabilities

Vulnerabilities for packages: kots, pulumi-language-java, gitsign, gomplate, go-licenses, goreleaser, gitness, src-fingerprint, apko, bom, pulumi-language-dotnet, pulumi, pulumi-kubernetes-operator, scorecard, kubevela, pulumi-language-yaml, flux-kustomize-controller, zot, nuclei...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: k3d, ksops, kargo, pulumi-language-dotnet, step, terragrunt, opentelemetry-collector-contrib, dex, spegel, restic, smarter-device-manager, cert-manager-cmctl, gomplate, grafana-mimir, sigstore-scaffolding, minio, spicedb, spire-server,...

GO-2024-2466 vulnerabilities

Vulnerabilities for packages: pulumi-language-dotnet, bom, nuclei, gomplate, pulumi-language-java, kubevela, go-licenses, scorecard, src-fingerprint, pulumi-language-yaml, gitness, apko, goreleaser, pulumi, pulumi-kubernetes-operator, zot, kots, flux-kustomize-controller, gitsign...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: cerbos, kargo, pulumi-language-dotnet, skaffold, bom, nuclei, rancher-fleet, flux, trivy-operator, gomplate, chezmoi, gitaly, kyverno, syft, nfpm, grafana-alloy, pulumi-language-java, kubevela, trufflehog, k9s, dagger, scorecard, melange, src-fingerprint, steampipe,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sns, ksops, act, flux-notification-controller, atlantis, prometheus-operator, nerdctl, gomplate, chezmoi, kyverno, chisel, syft, crossplane-provider-aws-cloudwatchlogs, terraform-provider-acme, spire-server, podman, steampipe, dagger,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: k3d, ksops, kargo, terragrunt, flux-notification-controller, opentelemetry-collector-contrib, nuclei, flux, gomplate, actions-runner-controller, skopeo, grafana-mimir, falcoctl, kubevela, sigstore-scaffolding, aactl, spire-server, crossplane-provider-azure,...

CLEANSTART-2026-YB91515 Security fixes in gomplate 4.3.3-r1

Package gomplate version 4.3.3-r1 fixes 3 vulnerabilities: CVE-2026-42507, CVE-2026-42504, CVE-2026-27145...

CLEANSTART-2026-PJ11836 Security fixes in gomplate-fips 4.3.3-r3

Package gomplate-fips version 4.3.3-r3 fixes 4 vulnerabilities: CVE-2025-61729, CVE-2025-61727, ghsa-j5w8-q4qc-rx2x, ghsa-f6x5-jh6r-wrfv...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: kubescape, act, apko, gitaly, xeol, grafana-alloy-fips, grafana-alloy, grafana, cloudbeat-fips, pulumi, steampipe, packer-fips, k9s, nemo, mapotf, amazon-ssm-agent-fips, flux-fips, rancher-fleet-fips, k9s-fips, coder-fips, upwind-agent, grafana-fips, kots,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: kubescape, act, apko, gitaly, xeol, grafana-alloy-fips, grafana-alloy, grafana, cloudbeat-fips, pulumi, steampipe, packer-fips, k9s, nemo, mapotf, amazon-ssm-agent-fips, flux-fips, rancher-fleet-fips, k9s-fips, coder-fips, upwind-agent, grafana-fips, kots,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: kubescape, act, apko, gitaly, xeol, grafana-alloy-fips, grafana-alloy, grafana, cloudbeat-fips, pulumi, steampipe, packer-fips, k9s, nemo, mapotf, amazon-ssm-agent-fips, flux-fips, rancher-fleet-fips, k9s-fips, coder-fips, upwind-agent, grafana-fips, kots,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: kubescape, act, apko, gitaly, xeol, grafana-alloy-fips, grafana-alloy, grafana, cloudbeat-fips, pulumi, steampipe, packer-fips, k9s, nemo, mapotf, amazon-ssm-agent-fips, flux-fips, rancher-fleet-fips, k9s-fips, upwind-agent, grafana-fips, kots, argo-workflows-fips,...

GHSA-XMRV-PMRH-HHX2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-eks, falcoctl, teleport-operator-fips, gitlab-cng, kubescape, longhorn-backing-image-manager-fips, bento, cloudprober-fips, clickhouse-backup, crossplane-provider-aws-lambda-fips, rqlite-fips, crossplane-provider-aws-servicediscovery,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: kubescape, timestamp-authority, trillian-fips, gogatekeeper, seaweedfs-rocksdb, keda, task, kubo, octo-sts, step-kms-plugin, kiali, grafana, pulumi, steampipe, vault-benchmark, crossplane-provider-terraform-fips, amazon-ssm-agent-fips, skopeo-fips, gitlab-workhorse-c...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: kubescape, apko, gitaly, xeol, grafana-alloy-fips, grafana-alloy, grafana, cloudbeat-fips, pulumi, steampipe, packer-fips, k9s, nemo, amazon-ssm-agent-fips, flux-fips, rancher-fleet-fips, k9s-fips, grafana-fips, kots, argo-workflows-fips, gomplate, melange, bom,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: kubescape, apko, gitaly, xeol, grafana-alloy-fips, grafana-alloy, grafana, cloudbeat-fips, pulumi, steampipe, packer-fips, k9s, nemo, amazon-ssm-agent-fips, flux-fips, rancher-fleet-fips, k9s-fips, grafana-fips, kots, argo-workflows-fips, gomplate, melange, bom,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: cerbos, kargo, pulumi-language-dotnet, skaffold, bom, nuclei, rancher-fleet, flux, trivy-operator, gomplate, chezmoi, gitaly, kyverno, syft, nfpm, grafana-alloy, pulumi-language-java, kubevela, trufflehog, k9s, dagger, scorecard, melange, src-fingerprint, steampipe,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: cerbos, kargo, pulumi-language-dotnet, skaffold, bom, nuclei, rancher-fleet, flux, trivy-operator, gomplate, chezmoi, gitaly, kyverno, syft, nfpm, grafana-alloy, pulumi-language-java, kubevela, trufflehog, k9s, dagger, scorecard, melange, src-fingerprint, steampipe,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: cerbos, kargo, pulumi-language-dotnet, skaffold, bom, nuclei, rancher-fleet, flux, trivy-operator, gomplate, chezmoi, gitaly, kyverno, syft, nfpm, grafana-alloy, pulumi-language-java, kubevela, trufflehog, k9s, dagger, scorecard, melange, src-fingerprint, steampipe,...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: cerbos, kargo, pulumi-language-dotnet, skaffold, bom, nuclei, rancher-fleet, flux, trivy-operator, gomplate, chezmoi, gitaly, kyverno, syft, nfpm, grafana-alloy, pulumi-language-java, kubevela, trufflehog, k9s, dagger, scorecard, melange, src-fingerprint, steampipe,...