GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: skaffold, kubernetes, sops, aactl, mattermost, osv-scanner, flux-kustomize-controller, ko, wolfictl, splunk-otel-collector, gitea, trivy-operator, mods, teleport, nfpm, zot, kubescape, pulumi-kubernetes-operator, crossplane-provider-azure-managedidentity,...

CLEANSTART-2026-LO26058 Security fixes for CVE-2025-15558, CVE-2026-1229, CVE-2026-25934, CVE-2026-27896, CVE-2026-33252, CVE-2026-33762, CVE-2026-34165, CVE-2026-34742, ghsa-37cx-329c-33x3, ghsa-89xv-2j6f-qhc8, ghsa-f6x5-jh6r-wrfv, ghsa-gm2x-2g9h-ccm8, ghsa-j5w8-q4qc-rx2x, ghsa-jhf3-xxhw-2wpp, ghsa-p436-gjf2-799p, ghsa-q382-vc8q-7jhj, ghsa-q9hv-hpm4-hj6x, ghsa-wvj2-96wp-fq3f, ghsa-xw59-hvm2-8pj6 applied in versions: 0.9.7-r1, 0.9.8-r0

Multiple security vulnerabilities affect the gptscript package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WX27664 Security fixes for CVE-2025-11579, CVE-2025-15558, CVE-2025-30153, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-jc7w-c686-c4v9, ghsa-p436-gjf2-799p, ghsa-rwvp-r38j-9rgg, ghsa-wq9g-9vfc-cfq9 applied in versions: 0.7.1-r0, 0.9.7-r1

Multiple security vulnerabilities affect the gptscript package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UD70996 Security fixes for CVE-2025-11579, CVE-2025-15558, CVE-2025-30153, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-jc7w-c686-c4v9, ghsa-p436-gjf2-799p, ghsa-rwvp-r38j-9rgg, ghsa-wq9g-9vfc-cfq9 applied in versions: 0.8.5-r0, 0.9.7-r1

Multiple security vulnerabilities affect the gptscript package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FC24138 Security fixes for CVE-2026-1229, CVE-2026-25934, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, ghsa-3xc5-wrhm-f963, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 0.9.7-r1, 0.9.9-r0, 0.9.9-r1, 0.9.9-r2

Multiple security vulnerabilities affect the gptscript package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-11579 vulnerabilities

Vulnerabilities for packages: undock, grype, wolfictl, trufflehog, gitleaks, k9s, gptscript, kots, filebrowser, zarf, syft, kubescape, nuclei, chezmoi...

GHSA-RWVP-R38J-9RGG vulnerabilities

Vulnerabilities for packages: undock, grype, wolfictl, trufflehog, gitleaks, k9s, gptscript, kots, filebrowser, zarf, syft, kubescape, nuclei, chezmoi...

CVE-2025-11579 vulnerabilities

Vulnerabilities for packages: syft-fips, trufflehog-fips, k9s-fips, grype, gotenberg, undock, chezmoi, nuclei, grype-fips, k9s, filebrowser, gptscript, kubescape, grype-db, gitleaks, chainctl, mattermost, kots, cg, wolfictl, mattermost-fips, trufflehog, syft, zarf...

GHSA-RWVP-R38J-9RGG vulnerabilities

Vulnerabilities for packages: syft-fips, trufflehog-fips, k9s-fips, grype, gotenberg, undock, chezmoi, nuclei, grype-fips, k9s, filebrowser, gptscript, kubescape, grype-db, gitleaks, chainctl, mattermost, kots, cg, wolfictl, mattermost-fips, trufflehog, syft, zarf...

CVE-2025-30153 vulnerabilities

Vulnerabilities for packages: timoni, dataplaneapi, gptscript, nuclei...

GHSA-WQ9G-9VFC-CFQ9 vulnerabilities

Vulnerabilities for packages: timoni, dataplaneapi, gptscript, nuclei...

CVE-2025-30153 vulnerabilities

Vulnerabilities for packages: timoni, gptscript, nuclei, dataplaneapi-fips, dataplaneapi...

GHSA-WQ9G-9VFC-CFQ9 vulnerabilities

Vulnerabilities for packages: timoni, gptscript, nuclei, dataplaneapi-fips, dataplaneapi...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: regclient, karma, kubernetes-csi-livenessprobe, q, splunk-otel-collector, octo-sts, mods, shfmt, slsa-verifier, x509-certificate-exporter, kubernetes-csi-driver-hostpath, prometheus-alertmanager, k6, grpcurl, yunikorn-web, glow, kiali, wait-for-port, bom,...

CVE-2025-21613 vulnerabilities

Vulnerabilities for packages: kargo, snyk-cli, pulumi-language-java, k8sgpt, flux, grafana-alloy, bom, flux-kustomize-controller, argo-events, guac, trivy, argo-workflows-fips, argocd-image-updater-fips, grype, packer-fips, argo-cd-fips, gitsign, argo-cd, pulumi, src-fingerprint-fips, chezmoi,...