GO-2026-6354 vulnerabilities

Vulnerabilities for packages: tigera-operator, docker-cli-buildx, kube-state-metrics, rancher-machine, longhorn-manager, melange, xeol-fips, splunk-otel-collector, cg, docker-cli-buildx-fips, grype, loki, gitlab-runner, spire-server, zitadel, pulumi-language-yaml, wolfictl, gitea, cloudbeat,...

CVE-2026-78662 vulnerabilities

Vulnerabilities for packages: tigera-operator, docker-cli-buildx, kube-state-metrics, rancher-machine, longhorn-manager, melange, xeol-fips, splunk-otel-collector, cg, docker-cli-buildx-fips, grype, loki, gitlab-runner, spire-server, zitadel, pulumi-language-yaml, wolfictl, gitea, cloudbeat,...

GO-2026-6355 vulnerabilities

Vulnerabilities for packages: tigera-operator, docker-cli-buildx, kube-state-metrics, rancher-machine, melange, xeol-fips, splunk-otel-collector, cg, docker-cli-buildx-fips, grype, loki, gitlab-runner, spire-server, zitadel, pulumi-language-yaml, wolfictl, gitea, cloudbeat, falco-no-driver,...

CVE-2026-56855 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, argo-workflows, zarf, fscrypt, wolfictl, rancher-agent, containerd, falco-no-driver, pulumi-language-dotnet, kyverno, cert-manager, pulumi-language-yaml, pulumi-kubernetes-operator, spire-server, kaf, flux, kubevela, sftpgo, rootlesskit, apko,...

CVE-2026-78662 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, argo-workflows, zarf, fscrypt, wolfictl, rancher-agent, containerd, falco-no-driver, pulumi-language-dotnet, kyverno, cert-manager, pulumi-language-yaml, pulumi-kubernetes-operator, spire-server, kaf, flux, kubevela, sftpgo, rootlesskit, apko,...

GO-2026-6354 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, argo-workflows, zarf, fscrypt, wolfictl, rancher-agent, containerd, falco-no-driver, pulumi-language-dotnet, kyverno, cert-manager, pulumi-language-yaml, pulumi-kubernetes-operator, spire-server, kaf, flux, kubevela, sftpgo, rootlesskit, apko,...

GO-2026-6355 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, argo-workflows, zarf, fscrypt, wolfictl, rancher-agent, containerd, falco-no-driver, pulumi-language-dotnet, kyverno, cert-manager, pulumi-language-yaml, pulumi-kubernetes-operator, spire-server, kaf, flux, kubevela, sftpgo, rootlesskit, apko,...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, spicedb, terragrunt, opentelemetry-collector, restic, ferretdb, hubble-ui, conftest, sigstore-scaffolding, zarf, kwok, opa, temporal, zot, ksops, vcluster, k8sgpt, pulumi-language-dotnet, cert-manager-cmctl, gomplate, kots, trivy, kaniko, cilium-cli,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, argocd-image-updater, flux-kustomize-controller, tfsec, argo-workflows, snyk-cli, scorecard, zarf, grype, zot, wolfictl, gptscript, src-fingerprint, gitsign, gitea, skaffold, k8sgpt, pulumi, pulumi-language-dotnet, goreleaser,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, argocd-image-updater, flux-kustomize-controller, tfsec, argo-workflows, snyk-cli, scorecard, zarf, grype, zot, wolfictl, gptscript, src-fingerprint, gitsign, gitea, skaffold, k8sgpt, pulumi, pulumi-language-dotnet, goreleaser,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, gitaly, argo-cd, argocd-image-updater, tfsec, argo-workflows, snyk-cli, scorecard, zarf, witness, grype, zot, wolfictl, cerbos, trufflehog, gptscript, src-fingerprint, trivy-operator, gitsign, gitea, steampipe, rancher-fleet, skaffol...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-linode, argocd-image-updater, crossplane-provider-aws-iam, terraform-provider-tls, zarf, podman, fscrypt, wolfictl, containerd, crossplane-provider-family-azure, glab, falco-no-driver, crossplane-provider-aws-sqs, pulumi-language-dotnet,...

CLEANSTART-2026-MH83831 Security fixes in pulumi-language-dotnet 3.103.0-r1

Package pulumi-language-dotnet version 3.103.0-r1 fixes 1 vulnerabilities: ghsa-3xc5-wrhm-f963...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: cloud-sql-proxy, crossplane-provider-aws-iam, nova, zarf, wolfictl, crossplane-provider-aws-sqs, pulumi-language-dotnet, crossplane-provider-aws-elasticache, cert-manager-webhook-pdns, pulumi-language-yaml, harbor, crossplane-provider-aws-lambda, flux,...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: cloud-sql-proxy, crossplane-provider-aws-iam, nova, zarf, wolfictl, crossplane-provider-aws-sqs, pulumi-language-dotnet, crossplane-provider-aws-elasticache, cert-manager-webhook-pdns, pulumi-language-yaml, harbor, crossplane-provider-aws-lambda, flux,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: tigera-operator, prometheus-blackbox-exporter, sigstore-scaffolding-fips, vexctl, kubernetes-dashboard-metrics-scraper, prometheus-pushgateway, prometheus-mysqld-exporter, kube-logging-operator, certificate-transparency, protoc-gen-go-grpc, crossplane-provider-aws-km...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: buildkitd, metrics-server-fips, terraform-provider-sendgrid, prometheus-blackbox-exporter, vault-csi-provider, cortex, scorecard, up, kubeflow, slsa-verifier, spark-operator, bank-vaults-fips, terraform-provider-sendgrid-fips, plutono-fips, kubescape,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: slsa-verifier, up, buildkitd, dgraph, terraform-provider-sendgrid, cortex, aactl, kubeflow, k3d, spark-operator, scorecard, src, kubevela, kubescape...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: grpcurl, pulumi-language-dotnet, gke-gcloud-auth-plugin, pulumi-language-yaml, fuse-overlayfs-snapshotter, pulumi-kubernetes-operator, newrelic-infrastructure-agent, nri-prometheus, certificate-transparency, kaf, memcached-exporter, envoy-ratelimit, gobuster,...