PT-2026-101056

Security vulnerability affects the gptscript package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100220

Security vulnerability affects the gptscript package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100443

Security vulnerability affects the gptscript package. This issue is resolved in later releases. See references for vulnerability details...

GO-2026-4569 vulnerabilities

Vulnerabilities for packages: ferretdb, jaeger, flux-operator-fips, gitlab-workhorse-ce, datadog-agent-fips, jaeger-fips, datadog-agent, opencost-fips, opencost, gitlab-workhorse-ce-fips, github-mcp-server, osv-scanner, flux-operator, gptscript...

GO-2025-3533 vulnerabilities

Vulnerabilities for packages: timoni, nuclei, dataplaneapi-fips, dataplaneapi, gptscript...

GO-2025-3922 vulnerabilities

Vulnerabilities for packages: terraform, zarf, undock, gptscript, gitleaks, steampipe, grafana-alloy, gitness, tflint, rancher-fleet, trufflehog, opentofu, envoy-gateway, trivy, vcluster, nuclei, guac, nsc, k9s, kubescape-operator, terragrunt, xeol, filebrowser, podman, zot, trivy-operator...

GO-2025-3533 vulnerabilities

Vulnerabilities for packages: gptscript, nuclei, dataplaneapi, timoni...

GO-2026-4569 vulnerabilities

Vulnerabilities for packages: github-mcp-server, jaeger, osv-scanner, gptscript, ferretdb, opencost, datadog-agent...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: kubescape, grype, nuclei, trufflehog, zarf, undock, syft, filebrowser, wolfictl, gptscript, gitleaks, chezmoi, k9s, kots...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: skaffold, kubevela, zarf, argocd-image-updater, pulumi-kubernetes-operator, goreleaser, gitea, gptscript, wolfictl, pulumi, grafana-alloy, gitsign, src-fingerprint, scorecard, pulumi-language-dotnet, apko, grype, pulumi-language-yaml, go-licenses, trivy, argo-events,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: skaffold, kubevela, zarf, argocd-image-updater, pulumi-kubernetes-operator, goreleaser, gitea, gptscript, wolfictl, pulumi, grafana-alloy, gitsign, src-fingerprint, scorecard, pulumi-language-dotnet, apko, grype, pulumi-language-yaml, go-licenses, trivy, argo-events,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: skaffold, kubevela, zarf, argocd-image-updater, pulumi-kubernetes-operator, gitea, gptscript, steampipe, kyverno, wolfictl, pulumi, grafana-alloy, gitsign, src-fingerprint, scorecard, pulumi-language-dotnet, apko, grype, pulumi-language-yaml, rancher-fleet, truffleho...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, containerd, crossplane-provider-aws-rds, pulumi-kubernetes-operator, gitea, step-kms-plugin, rootlesskit, slsa-verifier, sealed-secrets, crossplane-provider-aws-eks, atlantis, scorecard, sops, eksctl, argo-events, docker-machine-driver-linode,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: terraform-provider-pagerduty, fluxcd-kustomize-mutating-webhook, terraform, cert-manager-istio-csr, vault-k8s, vertical-pod-autoscaler, spark-operator, terraform-docs, undock, yace, amazon-cloudwatch-agent-operator, dbmate, crossplane-provider-aws-rds, goreleaser,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: terraform, envconsul, spark-operator, undock, amazon-cloudwatch-agent-operator, containerd, step-kms-plugin, chart-testing, portieris, wait-for-port, rabbitmq-cluster-operator, nri-nginx, grafana-alloy, aws-otel-collector, nri-apache, eksctl, argo-events,...

CLEANSTART-2026-MA12894 Security fixes in gptscript 0.9.9-r0

Package gptscript version 0.9.9-r0 fixes 3 vulnerabilities: ghsa-3xc5-wrhm-f963, CVE-2026-25934, CVE-2026-1229...

CLEANSTART-2026-FT09267 Security fixes in gptscript 0.9.9-r2

Package gptscript version 0.9.9-r2 fixes 1 vulnerabilities: CVE-2026-33814...

CLEANSTART-2026-KD31175 Security fixes in gptscript 0.9.7-r1

Package gptscript version 0.9.7-r1 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...

PT-2026-85943

Package gptscript version 0.9.7-r1 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: argocd-image-updater, containerd, pulumi-kubernetes-operator, gitea, step-kms-plugin, rootlesskit, slsa-verifier, atlantis, scorecard, sops, eksctl, argo-events, flux-image-automation-controller, buildkitd, hcloud, osv-scanner, rancher-machine,...