CLEANSTART-2026-DR81473 HashiCorp’s go-getter library up to v1

Multiple security vulnerabilities affect the harbor-scanner-trivy-fips package. HashiCorp’s go-getter library up to v1. See references for individual vulnerability details...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: prometheus-elasticsearch-exporter-fips, pulumi-kubernetes-operator, melange, timoni, crossplane-provider-aws, cortex, docker-credential-acr-env, gosu, secrets-store-csi-driver, govulncheck, http-echo, sonobuoy, q, git-lfs, ctop, capslock, multus-cni-fips, crane,...

GHSA-3669-72X9-R9P3 vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy, zot...

GHSA-3669-72X9-R9P3 vulnerabilities

Vulnerabilities for packages: zot, harbor-scanner-trivy-fips, harbor-scanner-trivy...

CVE-2024-37298 vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy, zot...

CVE-2024-37298 vulnerabilities

Vulnerabilities for packages: zot, harbor-scanner-trivy-fips, harbor-scanner-trivy...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, prometheus-elasticsearch-exporter-fips, sbom-scorecard, spire-server, pulumi-kubernetes-operator, tflint, trivy-fips, kubeadm-controlplane-controller, weaviate, timoni, crossplane-provider-aws, dataplaneapi-fips, cortex,...