GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: glab, fscrypt, rootlesskit, buildkitd, go-discover, pulumi, argocd-image-updater, pulumi-language-java, steampipe, kubescape, aactl, prometheus, kine, kargo, teleport, caddy, zarf, step-issuer, opentofu, docker-machine-driver-harvester, cosign, pulumi-language-dotnet...

CLEANSTART-2026-LO26058 Security fixes for CVE-2025-15558, CVE-2026-1229, CVE-2026-25934, CVE-2026-27896, CVE-2026-33252, CVE-2026-33762, CVE-2026-34165, CVE-2026-34742, ghsa-37cx-329c-33x3, ghsa-89xv-2j6f-qhc8, ghsa-f6x5-jh6r-wrfv, ghsa-gm2x-2g9h-ccm8, ghsa-j5w8-q4qc-rx2x, ghsa-jhf3-xxhw-2wpp, ghsa-p436-gjf2-799p, ghsa-q382-vc8q-7jhj, ghsa-q9hv-hpm4-hj6x, ghsa-wvj2-96wp-fq3f, ghsa-xw59-hvm2-8pj6 applied in versions: 0.9.7-r1, 0.9.8-r0

Multiple security vulnerabilities affect the gptscript package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WX27664 Security fixes for CVE-2025-11579, CVE-2025-15558, CVE-2025-30153, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-jc7w-c686-c4v9, ghsa-p436-gjf2-799p, ghsa-rwvp-r38j-9rgg, ghsa-wq9g-9vfc-cfq9 applied in versions: 0.7.1-r0, 0.9.7-r1

Multiple security vulnerabilities affect the gptscript package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UD70996 Security fixes for CVE-2025-11579, CVE-2025-15558, CVE-2025-30153, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-jc7w-c686-c4v9, ghsa-p436-gjf2-799p, ghsa-rwvp-r38j-9rgg, ghsa-wq9g-9vfc-cfq9 applied in versions: 0.8.5-r0, 0.9.7-r1

Multiple security vulnerabilities affect the gptscript package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FC24138 Security fixes for CVE-2026-1229, CVE-2026-25934, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, ghsa-3xc5-wrhm-f963, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 0.9.7-r1, 0.9.9-r0, 0.9.9-r1, 0.9.9-r2

Multiple security vulnerabilities affect the gptscript package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-11579 vulnerabilities

Vulnerabilities for packages: gitleaks, wolfictl, syft, filebrowser, kots, mattermost, nuclei, zarf, chezmoi, k9s, trufflehog, grype, gptscript, kubescape, undock...

GHSA-RWVP-R38J-9RGG vulnerabilities

Vulnerabilities for packages: gitleaks, wolfictl, syft, filebrowser, kots, mattermost, nuclei, zarf, chezmoi, k9s, trufflehog, grype, gptscript, kubescape, undock...

CVE-2025-11579 vulnerabilities

Vulnerabilities for packages: kubescape, grype-db, trufflehog-fips, grype, syft-fips, kots, mattermost, chainctl, gotenberg, undock, gitleaks, nuclei, chezmoi, filebrowser, trufflehog, k9s-fips, gptscript, k9s, syft, grype-fips, cg, wolfictl, zarf, mattermost-fips...

GHSA-RWVP-R38J-9RGG vulnerabilities

Vulnerabilities for packages: kubescape, grype-db, trufflehog-fips, grype, syft-fips, kots, mattermost, chainctl, gotenberg, undock, gitleaks, nuclei, chezmoi, filebrowser, trufflehog, k9s-fips, gptscript, k9s, syft, grype-fips, cg, wolfictl, zarf, mattermost-fips...

CVE-2025-30153 vulnerabilities

Vulnerabilities for packages: dataplaneapi, gptscript, timoni, nuclei...

GHSA-WQ9G-9VFC-CFQ9 vulnerabilities

Vulnerabilities for packages: dataplaneapi, gptscript, timoni, nuclei...

CVE-2025-30153 vulnerabilities

Vulnerabilities for packages: dataplaneapi, timoni, nuclei, gptscript, dataplaneapi-fips...

GHSA-WQ9G-9VFC-CFQ9 vulnerabilities

Vulnerabilities for packages: dataplaneapi, timoni, nuclei, gptscript, dataplaneapi-fips...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager, multus-cni, kubernetes-csi-driver-hostpath, aws-efs-csi-driver, node-feature-discovery, yace, neuvector-dbgen, sbom-convert, fluent-bit-plugin-loki, trillian, cosign, pluto, kubewatch, litestream, yq, skopeo, controller-gen, hivemind, ferretd...

CVE-2025-21613 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, kubescape, argo-events, argocd-image-updater-fips, flux-source-controller, datadog-agent, timoni, go-licenses, crossplane, grype, k8sgpt, kots, chainctl, src-fingerprint, pulumi, task, bom, kargo, osv-scanner, flux-kustomize-controller-fips,...