CLEANSTART-2026-YM63226 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the pulumi-kubernetes-operator package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

CLEANSTART-2026-CK42797 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-1229, CVE-2026-25679, CVE-2026-25934, CVE-2026-27139, CVE-2026-27142, ghsa-37cx-329c-33x3 applied in versions: 0.18.0-r1, 1.16.0-r0

Multiple security vulnerabilities affect the pulumi-kubernetes-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudformation, crossplane-provider-aws-kinesis, osv-scanner, cert-manager-cmctl, kyverno, crossplane-provider-aws-iam, flux-image-automation-controller, lazygit, pulumi-language-java, ksops, kubescape, goreleaser, aactl, argo-cd, buildkitd,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudformation, crossplane-provider-aws-kinesis, osv-scanner, cert-manager-cmctl, kyverno, crossplane-provider-aws-iam, flux-image-automation-controller, lazygit, pulumi-language-java, ksops, kubescape, goreleaser, aactl, argo-cd, buildkitd,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, helm, crossplane-provider-family-aws-fips, crossplane-provider-aws-sns-fips, crossplane-provider-aws-cognitoidentity, omni-fips, kubevela-fips, databricks-cli-fips, lazygit, rclone-fips, packer-fips,...

CVE-2023-49569 vulnerabilities

Vulnerabilities for packages: scorecard, gitsign, nuclei, pulumi-kubernetes-operator, src-fingerprint, gitness, bom, goreleaser, go-licenses...

CVE-2023-49569 vulnerabilities

Vulnerabilities for packages: bom, gitsign, gitness, pulumi-kubernetes-operator, src-fingerprint, goreleaser, scorecard, nuclei, go-licenses...

GHSA-449P-3H89-PW88 vulnerabilities

Vulnerabilities for packages: scorecard, gitsign, nuclei, pulumi-kubernetes-operator, src-fingerprint, gitness, bom, goreleaser, go-licenses...

GHSA-449P-3H89-PW88 vulnerabilities

Vulnerabilities for packages: bom, gitsign, gitness, pulumi-kubernetes-operator, src-fingerprint, goreleaser, scorecard, nuclei, go-licenses...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis, crossplane-provider-aws-route53, sops, kubescape, gitsign, spire-server, crossplane-provider-aws-memorydb, rclone, crossplane-provider-aws-cloudformation, gomplate, crossplane-provider-aws-lambda, kubevela,...

GHSA-3F2Q-6294-FMQ5 vulnerabilities

Vulnerabilities for packages: argo-events, snyk-cli, argo-events-fips, flux-notification-controller, pulumi-kubernetes-operator, melange, task, argo-workflows...

GHSA-3F2Q-6294-FMQ5 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, argo-events, snyk-cli, task, argo-workflows, melange, flux-notification-controller...

CVE-2023-46402 vulnerabilities

Vulnerabilities for packages: argo-events, snyk-cli, argo-events-fips, flux-notification-controller, pulumi-kubernetes-operator, melange, task, argo-workflows...

CVE-2023-46402 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, argo-events, snyk-cli, task, argo-workflows, melange, flux-notification-controller...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: metrics-server-fips, kubescape, kubernetes-csi-livenessprobe, kubevela, slsa-verifier, dgraph, cortex, spark-operator, vault-csi-provider, kubeflow, terraform-provider-sendgrid, kiam, volume-modifier-for-k8s-fips, prometheus-blackbox-exporter, buildkitd, scorecard,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: aactl, dgraph, slsa-verifier, prometheus-blackbox-exporter, kubeflow, buildkitd, k3d, cortex, kubescape, spark-operator, src, scorecard, kubevela, up, terraform-provider-sendgrid...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter, helm, yq, secrets-store-csi-driver-provider-gcp, rqlite, hey, kind, kube-logging-logging-operator, gke-gcloud-auth-plugin, atlantis-fips, flux-helm-controller, pulumi-language-yaml, vault-csi-provider, prometheus-statsd-exporter,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: dgraph, slsa-verifier, wireguard-go, kubernetes-csi-livenessprobe, sigstore-scaffolding, amass, memcached-exporter, spark-operator, kaf, prometheus-blackbox-exporter, pulumi-language-java, kubescape, src, aactl, buildkitd, atlantis, aws-efs-csi-driver,...