GO-2024-2466 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, scorecard, pulumi, kubevela, go-licenses, goreleaser, pulumi-language-java, gitness, kots, gomplate, src-fingerprint, flux-kustomize-controller, bom, zot, apko, pulumi-language-dotnet, gitsign, nuclei, pulumi-kubernetes-operator...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: dex, ferretdb, terraform-provider-google, kargo, hubble-ui, spire-server, cloudnative-pg, spicedb, cilium-cli, temporal, kots, opentelemetry-collector, certificate-transparency, cert-manager-cmctl, guac, opa, smarter-device-manager, spegel, vcluster, k8sgpt, tflint,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, grafana-alloy, kargo, rancher-fleet, wolfictl, witness, apko, gitsign, grype, trivy-operator, flux-source-controller, gitlab-runner, nuclei, kots, kyverno, gptscript, guac, kubescape, crossplane, skaffold, dagger, kubevela, zarf,...

GO-2024-2466 vulnerabilities

Vulnerabilities for packages: gitsign, apko, go-licenses, nuclei, kots, gitness, kubevela, flux-kustomize-controller, pulumi-kubernetes-operator, pulumi-language-dotnet, pulumi-language-yaml, goreleaser, scorecard, gomplate, bom, pulumi, zot, pulumi-language-java, src-fingerprint...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, policy-controller, kaf, kargo, spire-server, terraform-provider-azapi, docker-compose, trivy-operator, cloudflared, vault-benchmark, kine, crossplane-provider-azure-sql, flux-kustomize-controller, crossplane-provider-aws-kinesis,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, policy-controller, flux-image-reflector-controller, tekton-chains, kargo, spire-server, crossplane-provider-family-azure, gitsign, vexctl, buildkitd, flux-source-controller, nuclei, opentelemetry-collector,...

CLEANSTART-2026-YB91515 Security fixes in gomplate 4.3.3-r1

Package gomplate version 4.3.3-r1 fixes 3 vulnerabilities: CVE-2026-42507, CVE-2026-42504, CVE-2026-27145...

CLEANSTART-2026-PJ11836 Security fixes in gomplate-fips 4.3.3-r3

Package gomplate-fips version 4.3.3-r3 fixes 4 vulnerabilities: CVE-2025-61729, CVE-2025-61727, ghsa-j5w8-q4qc-rx2x, ghsa-f6x5-jh6r-wrfv...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: argo-events, flux-image-automation-controller, pulumi-language-yaml, gitlab-rails-ce-fips, scorecard, gitaly, kubevela, syft, argo-workflows, packer, argo-cd, chainctl, pulumi-language-java, teleport, rancher-fleet, kots, cloudbeat, grafana-alloy-fips,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: argo-events, flux-image-automation-controller, pulumi-language-yaml, gitlab-rails-ce-fips, scorecard, gitaly, kubevela, syft, argo-workflows, packer, argo-cd, chainctl, pulumi-language-java, teleport, rancher-fleet, kots, cloudbeat, grafana-alloy-fips,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: argo-events, flux-image-automation-controller, pulumi-language-yaml, gitlab-rails-ce-fips, scorecard, gitaly, kubevela, syft, flux-source-controller, argo-workflows, packer, argo-cd, chainctl, pulumi-language-java, teleport, rancher-fleet, kots, cloudbeat,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: argo-events, flux-image-automation-controller, pulumi-language-yaml, gitlab-rails-ce-fips, scorecard, gitaly, kubevela, syft, flux-source-controller, argo-workflows, packer, argo-cd, chainctl, pulumi-language-java, teleport, rancher-fleet, kots, cloudbeat,...

GHSA-XMRV-PMRH-HHX2 vulnerabilities

Vulnerabilities for packages: amazon-ecs-agent-fips, bank-vaults, crossplane-provider-aws-cognitoidentity-fips, sops-fips, spire-server-fips, crossplane-provider-terraform, crossplane-provider-aws-s3, crossplane-provider-aws-cognitoidp, crossplane-provider-aws-efs, crossplane-provider-aws-s3-fips...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: spire-server-fips, scorecard, crossplane-provider-gcp-fips, chainloop-control-plane-fips, minio, kots, grafana-alloy-fips, neuvector, flyte, sops, azcopy-fips, skaffold-fips, cluster-api-aws-controller, ratify-fips, temporal-fips, cert-manager-istio-csr, trufflehog,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: argo-events, flux-image-automation-controller, pulumi-language-yaml, gitlab-rails-ce-fips, scorecard, gitaly, kubevela, syft, flux-source-controller, argo-workflows, packer, argo-cd, chainctl, pulumi-language-java, teleport, rancher-fleet, kots, cloudbeat,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: argo-events, flux-image-automation-controller, pulumi-language-yaml, gitlab-rails-ce-fips, scorecard, gitaly, kubevela, syft, flux-source-controller, argo-workflows, packer, argo-cd, chainctl, pulumi-language-java, teleport, rancher-fleet, kots, cloudbeat,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, grafana-alloy, kargo, rancher-fleet, wolfictl, witness, apko, gitsign, grype, trivy-operator, flux-source-controller, gitlab-runner, nuclei, kots, kyverno, gptscript, guac, kubescape, crossplane, skaffold, dagger, kubevela, zarf,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, grafana-alloy, kargo, rancher-fleet, wolfictl, witness, apko, gitsign, grype, trivy-operator, flux-source-controller, gitlab-runner, nuclei, kots, kyverno, gptscript, guac, kubescape, crossplane, skaffold, dagger, kubevela, zarf,...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, grafana-alloy, kargo, rancher-fleet, wolfictl, witness, apko, gitsign, grype, trivy-operator, flux-source-controller, gitlab-runner, nuclei, kots, kyverno, gptscript, guac, kubescape, crossplane, skaffold, dagger, kubevela, zarf,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, grafana-alloy, kargo, rancher-fleet, wolfictl, witness, apko, gitsign, grype, trivy-operator, flux-source-controller, gitlab-runner, nuclei, kots, kyverno, gptscript, guac, kubescape, crossplane, skaffold, dagger, kubevela, zarf,...