GO-2025-3533 vulnerabilities

Vulnerabilities for packages: nuclei, gptscript, dataplaneapi, timoni, dataplaneapi-fips...

GO-2026-4569 vulnerabilities

Vulnerabilities for packages: jaeger-fips, gptscript, flux-operator, flux-operator-fips, opencost-fips, github-mcp-server, gitlab-workhorse-ce, gitlab-workhorse-ce-fips, jaeger, osv-scanner, datadog-agent-fips, datadog-agent, ferretdb, opencost...

GO-2025-3922 vulnerabilities

Vulnerabilities for packages: trufflehog, envoy-gateway, gptscript, nsc, xeol, gitleaks, vcluster, nuclei, filebrowser, zot, tflint, terraform, zarf, kubescape-operator, steampipe, gitness, podman, opentofu, grafana-alloy, terragrunt, rancher-fleet, guac, undock, k9s, trivy-operator, trivy...

GO-2025-3533 vulnerabilities

Vulnerabilities for packages: gptscript, dataplaneapi, nuclei, timoni...

GO-2026-4569 vulnerabilities

Vulnerabilities for packages: jaeger, ferretdb, opencost, osv-scanner, gptscript, github-mcp-server, datadog-agent...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: gitleaks, grype, k9s, chezmoi, trufflehog, syft, kubescape, nuclei, zarf, wolfictl, gptscript, kots, filebrowser, undock...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: bom, grype, chezmoi, pulumi, flux, skaffold, syft, trivy, kubevela, dagger, gptscript, pulumi-language-java, gitsign, flux-image-automation-controller, flux-source-controller, nuclei, argo-events, timoni, kaniko, kots, melange, argocd-image-updater, tfsec, zot, zarf,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: bom, grype, chezmoi, pulumi, flux, skaffold, syft, trivy, kubevela, dagger, gptscript, pulumi-language-java, gitsign, flux-image-automation-controller, flux-source-controller, nuclei, argo-events, timoni, kaniko, kots, melange, argocd-image-updater, tfsec, zot, zarf,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: bom, grype, teleport, chezmoi, pulumi, flux, skaffold, syft, trufflehog, kubevela, dagger, gptscript, trivy-operator, pulumi-language-java, xeol, gitsign, flux-image-automation-controller, flux-source-controller, nuclei, argo-events, gitaly, kaniko, kots, melange,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: pulumi, terraform-provider-acme, chisel, traefik, terraform-provider-azapi, crossplane-provider-aws-dynamodb, telegraf, ko, rancher-machine, flux-source-controller, crossplane-provider-aws-cloudwatchlogs, neuvector-sigstore-interface, crossplane-provider-aws-s3,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: spire-controller-manager, dbmate, juicefs, chisel, pguser, dockerize, nri-redis, traefik, cloud-provider-vsphere, kubernetes-dns-node-cache, crossplane-provider-aws-dynamodb, telegraf, volume-modifier-for-k8s, golangci-lint, rancher-machine, ip-masq-agent,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: spire-controller-manager, libnvidia-container, cis-operator, nri-redis, terraform-provider-azapi, cloud-provider-vsphere, ini-file, ko, ip-masq-agent, render-template, k3d, neuvector-sigstore-interface, polaris, kyverno-notation-aws, mongo-tools,...

CLEANSTART-2026-MA12894 Security fixes in gptscript 0.9.9-r0

Package gptscript version 0.9.9-r0 fixes 3 vulnerabilities: ghsa-3xc5-wrhm-f963, CVE-2026-25934, CVE-2026-1229...

CLEANSTART-2026-KD31175 Security fixes in gptscript 0.9.7-r1

Package gptscript version 0.9.7-r1 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...

CLEANSTART-2026-FT09267 Security fixes in gptscript 0.9.9-r2

Package gptscript version 0.9.9-r2 fixes 1 vulnerabilities: CVE-2026-33814...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: pulumi, chisel, telegraf, ko, rancher-machine, flux-source-controller, neuvector-sigstore-interface, kubernetes, flux-notification-controller, argocd-image-updater, cilium-cli, atlantis, steampipe, step-issuer, helm, step-kms-plugin, guac, scorecard,...

CLEANSTART-2026-LO26058 Security fixes for CVE-2025-15558, CVE-2026-1229, CVE-2026-25934, CVE-2026-27896, CVE-2026-33252, CVE-2026-33762, CVE-2026-34165, CVE-2026-34742, ghsa-37cx-329c-33x3, ghsa-89xv-2j6f-qhc8, ghsa-f6x5-jh6r-wrfv, ghsa-gm2x-2g9h-ccm8, ghsa-j5w8-q4qc-rx2x, ghsa-jhf3-xxhw-2wpp, ghsa-p436-gjf2-799p, ghsa-q382-vc8q-7jhj, ghsa-q9hv-hpm4-hj6x, ghsa-wvj2-96wp-fq3f, ghsa-xw59-hvm2-8pj6 applied in versions: 0.9.7-r1, 0.9.8-r0

Multiple security vulnerabilities affect the gptscript package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WX27664 Security fixes for CVE-2025-11579, CVE-2025-15558, CVE-2025-30153, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-jc7w-c686-c4v9, ghsa-p436-gjf2-799p, ghsa-rwvp-r38j-9rgg, ghsa-wq9g-9vfc-cfq9 applied in versions: 0.7.1-r0, 0.9.7-r1

Multiple security vulnerabilities affect the gptscript package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UD70996 Security fixes for CVE-2025-11579, CVE-2025-15558, CVE-2025-30153, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-jc7w-c686-c4v9, ghsa-p436-gjf2-799p, ghsa-rwvp-r38j-9rgg, ghsa-wq9g-9vfc-cfq9 applied in versions: 0.8.5-r0, 0.9.7-r1

Multiple security vulnerabilities affect the gptscript package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FC24138 Security fixes for CVE-2026-1229, CVE-2026-25934, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, ghsa-3xc5-wrhm-f963, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 0.9.7-r1, 0.9.9-r0, 0.9.9-r1, 0.9.9-r2

Multiple security vulnerabilities affect the gptscript package. These issues are resolved in later releases. See references for individual vulnerability details...