GO-2026-6355 vulnerabilities

Vulnerabilities for packages: osv-scanner, prometheus-operator, cloudbeat, kube-conformance, flux-fips, falco-no-driver, wal-g-fips, kubescape-server-fips, terraform, grype, grafana-alloy, gitlab-rails-ce-fips, omnictl-multiarch-fips, aactl, scc, flux, frankenphp-8.5, frankenphp-8.2, external-dns...

GO-2026-6354 vulnerabilities

Vulnerabilities for packages: osv-scanner, prometheus-operator, cloudbeat, kube-conformance, flux-fips, falco-no-driver, wal-g-fips, kubescape-server-fips, terraform, grype, grafana-alloy, longhorn-cli, gitlab-rails-ce-fips, omnictl-multiarch-fips, aactl, scc, flux, frankenphp-8.5, frankenphp-8.2...

CVE-2026-78662 vulnerabilities

Vulnerabilities for packages: osv-scanner, prometheus-operator, cloudbeat, kube-conformance, flux-fips, falco-no-driver, wal-g-fips, kubescape-server-fips, terraform, grype, grafana-alloy, longhorn-cli, gitlab-rails-ce-fips, omnictl-multiarch-fips, aactl, scc, flux, frankenphp-8.5, frankenphp-8.2...

GO-2026-6354 vulnerabilities

Vulnerabilities for packages: argo-cd, trufflehog, grype, melange, docker, flux-source-controller, rclone, scorecard, helm, cilium-cli, goreleaser, seaweedfs, nfpm, argo-events, loki, argo-workflows, flux-image-automation-controller, cilium, kubevela, chisel, apko, wolfictl,...

GO-2026-6355 vulnerabilities

Vulnerabilities for packages: argo-cd, trufflehog, grype, melange, docker, flux-source-controller, rclone, scorecard, helm, cilium-cli, goreleaser, seaweedfs, nfpm, argo-events, loki, argo-workflows, flux-image-automation-controller, cilium, kubevela, chisel, apko, wolfictl,...

CVE-2026-56855 vulnerabilities

Vulnerabilities for packages: argo-cd, trufflehog, grype, melange, docker, flux-source-controller, rclone, scorecard, helm, cilium-cli, goreleaser, seaweedfs, nfpm, argo-events, loki, argo-workflows, flux-image-automation-controller, cilium, kubevela, chisel, apko, wolfictl,...

CVE-2026-78662 vulnerabilities

Vulnerabilities for packages: argo-cd, trufflehog, grype, melange, docker, flux-source-controller, rclone, scorecard, helm, cilium-cli, goreleaser, seaweedfs, nfpm, argo-events, loki, argo-workflows, flux-image-automation-controller, cilium, kubevela, chisel, apko, wolfictl,...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: vcluster, step-ca, spicedb, melange, sops, kaniko, ferretdb, fulcio, k3s, sigstore-scaffolding, dex, restic, gomplate, cloudnative-pg, pulumi-language-dotnet, kots, cilium-cli, opentelemetry-collector, rqlite, grpc-health-probe, grafana-agent-operator, guac,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, grype, melange, apko, flux-source-controller, kaniko, wolfictl, kubescape, scorecard, crossplane, task, pulumi-language-java, pulumi-language-dotnet, kots, pulumi-language-yaml, gitsign, skaffold, chezmoi, goreleaser, guac, argo-events,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, grype, melange, apko, flux-source-controller, kaniko, wolfictl, kubescape, scorecard, crossplane, task, pulumi-language-java, pulumi-language-dotnet, kots, pulumi-language-yaml, gitsign, skaffold, chezmoi, goreleaser, guac, argo-events,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: argo-cd, trufflehog, grype, melange, apko, flux-source-controller, kaniko, trivy-operator, kubescape, external-secrets-operator, teleport, wolfictl, scorecard, crossplane, witness, pulumi-language-java, gomplate, gitaly, pulumi-language-dotnet, steampipe, kots,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: argo-cd, src, flux-kustomize-controller, grype, melange, crossplane-provider-azure-sql, docker, flux-source-controller, neuvector-sigstore-interface, scorecard, helm, step-issuer, steampipe, tw, crossplane-provider-aws-sns, cilium-cli, nfpm, argo-events, buildkitd,...

CLEANSTART-2026-MH83831 Security fixes in pulumi-language-dotnet 3.103.0-r1

Package pulumi-language-dotnet version 3.103.0-r1 fixes 1 vulnerabilities: ghsa-3xc5-wrhm-f963...

PT-2026-85960

Package pulumi-language-dotnet version 3.103.0-r1 fixes 1 vulnerabilities: ghsa-3xc5-wrhm-f963...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: src, flux-kustomize-controller, melange, terraform-provider-grafana, ollama, crossplane-provider-aws-sns, cilium-cli, goreleaser, cert-manager-webhook-pdns, cloud-sql-proxy, datadog-agent, grafana-mimir, crossplane-provider-aws-lambda, crossplane-provider-aws-firehos...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: src, flux-kustomize-controller, melange, terraform-provider-grafana, ollama, crossplane-provider-aws-sns, cilium-cli, goreleaser, cert-manager-webhook-pdns, cloud-sql-proxy, datadog-agent, grafana-mimir, crossplane-provider-aws-lambda, crossplane-provider-aws-firehos...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-ui, prometheus-operator, gcsfuse, eksctl, kube-rbac-proxy-fips, ollama, kots, crossplane-provider-aws-firehose, kiam, runc, crossplane-provider-aws-s3, kubernetes-dashboard-metrics-scraper-fips, dynamic-localpv-provisioner-fips,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: up, kubeflow-fips, spark-operator, bank-vaults-fips, terraform-provider-sendgrid, k3d, kubevela, kubeflow, dgraph, prometheus-adapter-fips, scorecard, conftest-fips, kubernetes-csi-livenessprobe-fips, aactl, vault-csi-provider, kubescape, kubernetes-csi-livenessprobe...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: src, cortex, k3d, up, dgraph, slsa-verifier, kubevela, kubeflow, kubescape, spark-operator, terraform-provider-sendgrid, buildkitd, scorecard, aactl...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: src, flux-kustomize-controller, grype, flux-source-controller, kubewatch, scorecard, ip-masq-agent, helm, kubernetes-csi-livenessprobe, ollama, frp, rqlite, memcached-exporter, buildkitd, cosign, k3d, metrics-server, certificate-transparency,...