25 matches found
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, rke2-cloud-provider, kyverno, gatekeeper, kubernetes-csi-external-snapshotter, cluster-api-helm-controller, kapp-controller, descheduler, kwok, cluster-autoscaler, hubble-ui, yunikorn-k8shim, cloud-provider-aws, openfga, rancher, zot, cluster-ap...
GO-2025-3367 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, kargo, pulumi, guac, trivy, grype, zarf, snyk-cli, bom, kubevela, argo-workflows, zot, dagger, kaniko, pulumi-language-java, k9s, scorecard, pulumi-language-dotnet, chezmoi, gitea, goreleaser, k8sgpt, nuclei, go-licenses, src-fingerprint,...
GO-2025-3368 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, kargo, pulumi, guac, trivy, grype, zarf, snyk-cli, bom, kubevela, argo-workflows, zot, dagger, kaniko, pulumi-language-java, k9s, scorecard, pulumi-language-dotnet, chezmoi, gitea, goreleaser, k8sgpt, nuclei, go-licenses, src-fingerprint,...
GO-2026-4910 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, cerbos, kargo, pulumi, guac, kyverno, gitaly, trivy, grype, zarf, snyk-cli, bom, kubevela, argo-workflows, zot, dagger, kaniko, pulumi-language-java, k9s, external-secrets-operator, scorecard, pulumi-language-dotnet, chezmoi, gitea, argo-cd,...
GO-2024-2947 vulnerabilities
Vulnerabilities for packages: neuvector-sigstore-interface, buildkitd, kargo, pulumi, guac, terragrunt, terraform, zarf, timestamp-authority, snyk-cli, step-ca, k3d, kubevela, fulcio, kubernetes-event-exporter, terraform-provider-azurerm, zot, flux-helm-controller, crossplane-provider-azure-sql,...
CLEANSTART-2026-IM94158 Security fixes in pulumi-kubernetes-operator 0.18.0-r1
Package pulumi-kubernetes-operator version 0.18.0-r1 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-1229...
CLEANSTART-2026-WC86090 Security fixes in pulumi-kubernetes-operator 0.18.0-r2
Package pulumi-kubernetes-operator version 0.18.0-r2 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...
CLEANSTART-2026-YM63226 gRPC-Go is the Go language implementation of gRPC
Multiple security vulnerabilities affect the pulumi-kubernetes-operator package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-CK42797 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-1229, CVE-2026-25679, CVE-2026-25934, CVE-2026-27139, CVE-2026-27142, ghsa-37cx-329c-33x3 applied in versions: 0.18.0-r1, 1.16.0-r0
Multiple security vulnerabilities affect the pulumi-kubernetes-operator package. These issues are resolved in later releases. See references for individual vulnerability details...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, helm-push, rclone, gitaly, crossplane-provider-aws-iam, grype, zarf, cluster-api, pulumi-language-java, crossplane-provider-aws-cloudformation, crossplane-provider-azure-managedidentity, crossplane-provider-aws-rds, crossplane-provider-keycloak,...
GHSA-Q9HV-HPM4-HJ6X vulnerabilities
Vulnerabilities for packages: argocd-image-updater, helm-push, rclone, gitaly, crossplane-provider-aws-iam, grype, zarf, cluster-api, pulumi-language-java, crossplane-provider-aws-cloudformation, crossplane-provider-azure-managedidentity, crossplane-provider-aws-rds, crossplane-provider-keycloak,...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-sns, crossplane-provider-keycloak, terraform-provider-databricks, external-secrets-operator, gitaly-fips, crossplane-provider-family-aws-fips, atlantis-fips, grafana-alloy-fips, q, opentofu-fips, terraform-provider-databricks-fips, aactl,...
CVE-2023-49569 vulnerabilities
Vulnerabilities for packages: scorecard, gitness, nuclei, src-fingerprint, pulumi-kubernetes-operator, gitsign, bom, go-licenses, goreleaser...
CVE-2023-49569 vulnerabilities
Vulnerabilities for packages: scorecard, goreleaser, pulumi-kubernetes-operator, nuclei, go-licenses, bom, src-fingerprint, gitsign, gitness...
GHSA-449P-3H89-PW88 vulnerabilities
Vulnerabilities for packages: scorecard, gitness, nuclei, src-fingerprint, pulumi-kubernetes-operator, gitsign, bom, go-licenses, goreleaser...
GHSA-449P-3H89-PW88 vulnerabilities
Vulnerabilities for packages: scorecard, goreleaser, pulumi-kubernetes-operator, nuclei, go-licenses, bom, src-fingerprint, gitsign, gitness...
GHSA-9763-4F94-GFCH vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-sns, crossplane, tekton-chains, actions-runner-controller, zarf, skaffold, tkn, crossplane-provider-aws-kms, crossplane-provider-family-aws, pulumi-language-yaml, wolfictl, slsa-verifier, aactl, boring-registry, crossplane-provider-aws-eks,...
GHSA-3F2Q-6294-FMQ5 vulnerabilities
Vulnerabilities for packages: task, snyk-cli, argo-workflows, argo-events-fips, flux-notification-controller, pulumi-kubernetes-operator, argo-events, melange...