25 matches found
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: cloud-provider-vsphere, cluster-api-helm-controller, cilium, kube-state-metrics, kubernetes-csi-external-provisioner, kube-metrics-adapter, helm-operator, azure-service-operator, cluster-api-ipam-provider-in-cluster, metrics-server, rancher-system-agent,...
GO-2025-3367 vulnerabilities
Vulnerabilities for packages: trivy, dagger, crossplane, gptscript, go-licenses, pulumi-kubernetes-operator, pulumi-language-java, nuclei, kargo, argocd-image-updater, flux-kustomize-controller, wolfictl, argo-workflows, chezmoi, skaffold, task, pulumi-language-dotnet, src-fingerprint, scorecard,...
GO-2025-3368 vulnerabilities
Vulnerabilities for packages: trivy, dagger, crossplane, gptscript, go-licenses, pulumi-kubernetes-operator, pulumi-language-java, nuclei, kargo, argocd-image-updater, flux-kustomize-controller, wolfictl, argo-workflows, chezmoi, skaffold, task, pulumi-language-dotnet, src-fingerprint, scorecard,...
GO-2026-4910 vulnerabilities
Vulnerabilities for packages: argo-cd, trivy, dagger, crossplane, gptscript, rancher-fleet, pulumi-kubernetes-operator, pulumi-language-java, nuclei, kargo, argocd-image-updater, steampipe, nfpm, wolfictl, argo-workflows, chezmoi, skaffold, pulumi-language-dotnet, src-fingerprint, gomplate,...
GO-2024-2947 vulnerabilities
Vulnerabilities for packages: spire-server, crossplane-provider-azure-sql, glab, policy-controller, crossplane-provider-azure-managedidentity, opentelemetry-collector-contrib, crossplane-provider-azure-storage, pulumi-kubernetes-operator, ksops, nuclei, kargo, falcoctl, fulcio,...
CLEANSTART-2026-IM94158 Security fixes in pulumi-kubernetes-operator 0.18.0-r1
Package pulumi-kubernetes-operator version 0.18.0-r1 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-1229...
CLEANSTART-2026-WC86090 Security fixes in pulumi-kubernetes-operator 0.18.0-r2
Package pulumi-kubernetes-operator version 0.18.0-r2 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...
CLEANSTART-2026-YM63226 gRPC-Go is the Go language implementation of gRPC
Multiple security vulnerabilities affect the pulumi-kubernetes-operator package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-CK42797 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-1229, CVE-2026-25679, CVE-2026-25934, CVE-2026-27139, CVE-2026-27142, ghsa-37cx-329c-33x3 applied in versions: 0.18.0-r1, 1.16.0-r0
Multiple security vulnerabilities affect the pulumi-kubernetes-operator package. These issues are resolved in later releases. See references for individual vulnerability details...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: argo-cd, crossplane-provider-azure-managedidentity, gptscript, nuclei, crossplane-provider-aws-rds, crossplane-provider-keycloak, skaffold, src-fingerprint, crossplane-provider-aws-cloudformation, gomplate, scorecard, buildkitd, crossplane-provider-aws-dynamodb, hydr...
GHSA-Q9HV-HPM4-HJ6X vulnerabilities
Vulnerabilities for packages: argo-cd, crossplane-provider-azure-managedidentity, gptscript, nuclei, crossplane-provider-aws-rds, crossplane-provider-keycloak, skaffold, src-fingerprint, crossplane-provider-aws-cloudformation, gomplate, scorecard, buildkitd, crossplane-provider-aws-dynamodb, hydr...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-cloudfront, policy-controller, openbao-fips, terraform-provider-databricks, omnictl-multiarch, argo-events-fips, crossplane-provider-aws-sqs-fips, skaffold-fips, trufflehog-fips, trivy-operator, argo-cd-fips, crossplane-provider-aws-ec2-fips,...
CVE-2023-49569 vulnerabilities
Vulnerabilities for packages: gitness, go-licenses, src-fingerprint, pulumi-kubernetes-operator, gitsign, nuclei, scorecard, goreleaser, bom...
CVE-2023-49569 vulnerabilities
Vulnerabilities for packages: bom, goreleaser, src-fingerprint, scorecard, gitsign, go-licenses, nuclei, pulumi-kubernetes-operator, gitness...
GHSA-449P-3H89-PW88 vulnerabilities
Vulnerabilities for packages: bom, goreleaser, src-fingerprint, scorecard, gitsign, go-licenses, nuclei, pulumi-kubernetes-operator, gitness...
GHSA-449P-3H89-PW88 vulnerabilities
Vulnerabilities for packages: gitness, go-licenses, src-fingerprint, pulumi-kubernetes-operator, gitsign, nuclei, scorecard, goreleaser, bom...
GHSA-9763-4F94-GFCH vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-cloudfront, crossplane-provider-aws-cloudformation, flux-image-automation-controller, crossplane-provider-aws-s3, policy-controller, rclone, terraform-provider-google, tekton-chains, wolfictl, spire-server, apko, gitsign, grype, vexctl,...
GHSA-3F2Q-6294-FMQ5 vulnerabilities
Vulnerabilities for packages: snyk-cli, argo-workflows, task, argo-events-fips, flux-notification-controller, argo-events, pulumi-kubernetes-operator, melange...