CVE-2026-11769

We have released version 5.24.0 of the Grafana Operator. This patch includes a CRITICAL severity security fix for a path traversal/privilege escalation vulnerability in the Grafana Operator. Summary The Grafana Operator supports loading dashboards & library panels using the jsonnet data templatin...

CVE-2026-11769 Operator - Namespaced User Path Traversal

We have released version 5.24.0 of the Grafana Operator. This patch includes a CRITICAL severity security fix for a path traversal/privilege escalation vulnerability in the Grafana Operator. Summary The Grafana Operator supports loading dashboards & library panels using the jsonnet data templatin...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: gke-gcloud-auth-plugin, jaeger, kratos, crossplane-provider-family-aws, terraform-provider-time, crossplane-provider-gcp, esbuild, cargobump, nri-memcached, cluster-api-gcp-controller, ksops, gostatsd, influx, kube-logging-operator-custom-runner,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: gke-gcloud-auth-plugin, jaeger, kratos, crossplane-provider-family-aws, terraform-provider-time, crossplane-provider-gcp, esbuild, cargobump, nri-memcached, cluster-api-gcp-controller, ksops, gostatsd, influx, kube-logging-operator-custom-runner,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: gke-gcloud-auth-plugin, jaeger, kratos, crossplane-provider-family-aws, terraform-provider-time, crossplane-provider-gcp, esbuild, cargobump, nri-memcached, cluster-api-gcp-controller, ksops, gostatsd, influx, kube-logging-operator-custom-runner,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: gke-gcloud-auth-plugin, jaeger, kratos, crossplane-provider-family-aws, terraform-provider-time, crossplane-provider-gcp, esbuild, cargobump, nri-memcached, cluster-api-gcp-controller, ksops, gostatsd, influx, kube-logging-operator-custom-runner,...

EUVD-2022-2791

Malicious code in bioql PyPI...

MAL-2025-33027 Malicious code in setup-jsonnet (npm)

The package setup-jsonnet was found to contain malicious code...

Malicious code in setup-jsonnet (npm)

The package setup-jsonnet was found to contain malicious code...

Fedora: Security Advisory for golang-github-google-jsonnet (FEDORA-2022-ea8f4e232d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for golang-github-jsonnet-bundler (FEDORA-2022-ea8f4e232d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: golang-github-jsonnet-bundler-0.4.0-9.fc36

A jsonnet package manager...

[SECURITY] Fedora 36 Update: golang-github-google-jsonnet-0.17.0-6.fc36

This an implementation of Jsonnet in pure Go. It is feature complete but is n ot as heavily exercised as the Jsonnet C++ implementation. Please try it out and give feedback...

Fedora: Security Advisory for golang-github-jsonnet-bundler (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: golang-github-jsonnet-bundler-0.4.0-8.fc35

A jsonnet package manager...

[SECURITY] Fedora 35 Update: golang-github-google-jsonnet-0.17.0-5.fc35

This an implementation of Jsonnet in pure Go. It is feature complete but is n ot as heavily exercised as the Jsonnet C++ implementation. Please try it out and give feedback...

Fedora: Security Advisory for golang-github-google-jsonnet (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for golang-github-jsonnet-bundler (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: golang-github-jsonnet-bundler-0.4.0-8.fc36

A jsonnet package manager...

[SECURITY] Fedora 36 Update: golang-github-google-jsonnet-0.17.0-5.fc36

This an implementation of Jsonnet in pure Go. It is feature complete but is n ot as heavily exercised as the Jsonnet C++ implementation. Please try it out and give feedback...