25 matches found
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: flux-kustomize-controller, spqr, keda, tekton-pipelines, cloud-provider-aws, external-secrets-operator, rancher-system-agent, kubernetes-csi-external-health-monitor, cluster-api-aws-controller, cloud-provider-vsphere, cert-manager-webhook-pdns,...
GO-2025-3368 vulnerabilities
Vulnerabilities for packages: flux-kustomize-controller, scorecard, pulumi-language-dotnet, k8sgpt, zot, grafana-alloy, guac, kots, src-fingerprint, nuclei, pulumi-language-yaml, flux-image-automation-controller, chezmoi, kubescape, go-licenses, gitsign, grype, pulumi, osv-scanner, skaffold,...
GO-2025-3367 vulnerabilities
Vulnerabilities for packages: flux-kustomize-controller, scorecard, pulumi-language-dotnet, k8sgpt, zot, grafana-alloy, guac, kots, src-fingerprint, nuclei, pulumi-language-yaml, flux-image-automation-controller, chezmoi, kubescape, go-licenses, gitsign, grype, pulumi, osv-scanner, skaffold,...
GO-2026-4910 vulnerabilities
Vulnerabilities for packages: kyverno, scorecard, pulumi-language-dotnet, trufflehog, gitaly, zot, grafana-alloy, guac, argo-cd, kots, external-secrets-operator, src-fingerprint, nuclei, rancher-fleet, pulumi-language-yaml, flux-image-automation-controller, steampipe, chezmoi, kubescape, xeol,...
GO-2024-2947 vulnerabilities
Vulnerabilities for packages: flux-kustomize-controller, scorecard, skopeo, slsa-verifier, sops, opentelemetry-collector, zot, guac, fulcio, buildkitd, src-fingerprint, nuclei, step-ca, flux-image-automation-controller, rook, tkn, kubescape, flux-image-reflector-controller, gh, gitsign,...
CLEANSTART-2026-IM94158 Security fixes in pulumi-kubernetes-operator 0.18.0-r1
Package pulumi-kubernetes-operator version 0.18.0-r1 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-1229...
CLEANSTART-2026-WC86090 Security fixes in pulumi-kubernetes-operator 0.18.0-r2
Package pulumi-kubernetes-operator version 0.18.0-r2 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...
CLEANSTART-2026-YM63226 gRPC-Go is the Go language implementation of gRPC
Multiple security vulnerabilities affect the pulumi-kubernetes-operator package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-CK42797 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-1229, CVE-2026-25679, CVE-2026-25934, CVE-2026-27139, CVE-2026-27142, ghsa-37cx-329c-33x3 applied in versions: 0.18.0-r1, 1.16.0-r0
Multiple security vulnerabilities affect the pulumi-kubernetes-operator package. These issues are resolved in later releases. See references for individual vulnerability details...
GHSA-Q9HV-HPM4-HJ6X vulnerabilities
Vulnerabilities for packages: flux-kustomize-controller, argo-rollouts, crossplane-provider-aws-memorydb, pulumi-language-dotnet, cert-manager-cmctl, grafana-alloy, crossplane-provider-keycloak, external-secrets-operator, crossplane-provider-aws-eks, crossplane-provider-aws-route53, xeol, gitsign...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: flux-kustomize-controller, argo-rollouts, crossplane-provider-aws-memorydb, pulumi-language-dotnet, cert-manager-cmctl, grafana-alloy, crossplane-provider-keycloak, external-secrets-operator, crossplane-provider-aws-eks, crossplane-provider-aws-route53, xeol, gitsign...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: hydra, helm-fips, flux, terraform-provider-databricks-fips, actions-runner-controller-fips, crossplane-provider-azure-authorization, commercial-grafana, flux-image-automation-controller, flux-source-controller-fips, crossplane-provider-aws-cloudwatchlogs-fips,...
CVE-2023-49569 vulnerabilities
Vulnerabilities for packages: scorecard, gitness, go-licenses, bom, gitsign, goreleaser, src-fingerprint, nuclei, pulumi-kubernetes-operator...
CVE-2023-49569 vulnerabilities
Vulnerabilities for packages: bom, goreleaser, gitsign, nuclei, go-licenses, gitness, scorecard, src-fingerprint, pulumi-kubernetes-operator...
GHSA-449P-3H89-PW88 vulnerabilities
Vulnerabilities for packages: bom, goreleaser, gitsign, nuclei, go-licenses, gitness, scorecard, src-fingerprint, pulumi-kubernetes-operator...
GHSA-449P-3H89-PW88 vulnerabilities
Vulnerabilities for packages: scorecard, gitness, go-licenses, bom, gitsign, goreleaser, src-fingerprint, nuclei, pulumi-kubernetes-operator...
GHSA-9763-4F94-GFCH vulnerabilities
Vulnerabilities for packages: vexctl, zarf, flux, terragrunt, apko, flux-image-automation-controller, policy-controller, wolfictl, crossplane-provider-aws-s3, crossplane-provider-family-aws, crossplane-provider-aws-sns, cosign, pulumi, tekton-chains, grype, skaffold, crossplane-provider-aws-sqs,...
GHSA-3F2Q-6294-FMQ5 vulnerabilities
Vulnerabilities for packages: flux-notification-controller, melange, task, argo-workflows, argo-events-fips, snyk-cli, argo-events, pulumi-kubernetes-operator...