CLEANSTART-2026-YM63226 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the pulumi-kubernetes-operator package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

CLEANSTART-2026-CK42797 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-1229, CVE-2026-25679, CVE-2026-25934, CVE-2026-27139, CVE-2026-27142, ghsa-37cx-329c-33x3 applied in versions: 0.18.0-r1, 1.16.0-r0

Multiple security vulnerabilities affect the pulumi-kubernetes-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: crossplane-provider-family-aws, hydra, boring-registry, cluster-api, datadog-agent, helm-push, argo-rollouts, opentofu, goreleaser, wal-g, melange, scorecard, nfpm, flux, terraform-provider-azuread, crossplane-provider-aws-cloudformation, flux-source-controller,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: crossplane-provider-family-aws, hydra, boring-registry, cluster-api, datadog-agent, helm-push, argo-rollouts, opentofu, goreleaser, wal-g, melange, scorecard, nfpm, flux, terraform-provider-azuread, crossplane-provider-aws-cloudformation, flux-source-controller,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, guac, crossplane-provider-aws-rds-fips, pulumi-language-dotnet, syft, crossplane-provider-aws-eks, gitlab-rails-ce-fips, crossplane-provider-azure-sql, xeol-fips, grype, flux-kustomize-controller-fips, crossplane-provider-aws-kinesis-fips,...

CVE-2023-49569 vulnerabilities

Vulnerabilities for packages: src-fingerprint, gitsign, bom, gitness, goreleaser, go-licenses, scorecard, nuclei, pulumi-kubernetes-operator...

CVE-2023-49569 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, scorecard, go-licenses, gitsign, src-fingerprint, nuclei, goreleaser, gitness, bom...

GHSA-449P-3H89-PW88 vulnerabilities

Vulnerabilities for packages: src-fingerprint, gitsign, bom, gitness, goreleaser, go-licenses, scorecard, nuclei, pulumi-kubernetes-operator...

GHSA-449P-3H89-PW88 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, scorecard, go-licenses, gitsign, src-fingerprint, nuclei, goreleaser, gitness, bom...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws, crossplane-provider-aws-sns, pulumi-language-dotnet, crossplane-provider-aws-eks, syft, terraform-provider-google, crossplane-provider-aws-kms, pulumi-language-yaml, gomplate, rclone, grype, vexctl, pulumi, scorecard,...

GHSA-3F2Q-6294-FMQ5 vulnerabilities

Vulnerabilities for packages: argo-workflows, pulumi-kubernetes-operator, snyk-cli, task, argo-events-fips, argo-events, flux-notification-controller, melange...

GHSA-3F2Q-6294-FMQ5 vulnerabilities

Vulnerabilities for packages: argo-workflows, task, flux-notification-controller, argo-events, snyk-cli, melange, pulumi-kubernetes-operator...

CVE-2023-46402 vulnerabilities

Vulnerabilities for packages: argo-workflows, task, flux-notification-controller, argo-events, snyk-cli, melange, pulumi-kubernetes-operator...

CVE-2023-46402 vulnerabilities

Vulnerabilities for packages: argo-workflows, pulumi-kubernetes-operator, snyk-cli, task, argo-events-fips, argo-events, flux-notification-controller, melange...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubeflow, cortex, kiam, scorecard, kube-oidc-proxy, dgraph, volume-modifier-for-k8s-fips, up, k3d, metrics-server-fips, prometheus-stackdriver-exporter, kubevela, falcoctl-fips, prometheus-adapter-fips, kubeflow-fips, conftest-fips, src, terraform-provider-sendgrid,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: aactl, slsa-verifier, buildkitd, prometheus-blackbox-exporter, src, kubevela, up, kubescape, k3d, spark-operator, dgraph, cortex, terraform-provider-sendgrid, scorecard, kubeflow...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller-fips, crossplane-provider-aws, pulumi-language-dotnet, git-lfs, gobuster, ollama, terraform, pulumi-language-java, kube-state-metrics-fips, kube-oidc-proxy, dex, kube-logging-logging-operator, tekton-chains, prometheus-node-exporter,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: nats, nginx-mainline, slsa-verifier, gke-gcloud-auth-plugin, gobuster, cosign, fuse-overlayfs-snapshotter, metrics-server, scorecard, conftest, flux-source-controller, newrelic-infrastructure-agent, kubernetes-csi-livenessprobe, nghttp2, terraform, minio, grpcurl,...