25 matches found
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: keda, cluster-autoscaler, tekton-chains, kube-metrics-adapter, spicedb, hubble, cert-manager-webhook-pdns, node-feature-discovery, tetragon, rke2-cloud-provider, metrics-server, telegraf, cluster-api-azure-controller, kube-state-metrics, tekton-pipelines, tkn,...
GO-2025-3368 vulnerabilities
Vulnerabilities for packages: flux, argo-workflows, grafana-alloy, zarf, tfsec, pulumi-language-java, gitea, wolfictl, src-fingerprint, syft, gptscript, kubescape, nuclei, dagger, pulumi-language-yaml, goreleaser, argo-events, kaniko, k8sgpt, kargo, skaffold, zot, flux-source-controller,...
GO-2025-3367 vulnerabilities
Vulnerabilities for packages: flux, argo-workflows, grafana-alloy, zarf, tfsec, pulumi-language-java, gitea, wolfictl, src-fingerprint, syft, gptscript, kubescape, nuclei, dagger, pulumi-language-yaml, goreleaser, argo-events, kaniko, k8sgpt, kargo, skaffold, zot, flux-source-controller,...
GO-2026-4910 vulnerabilities
Vulnerabilities for packages: flux, nfpm, argo-workflows, grafana-alloy, zarf, tfsec, pulumi-language-java, steampipe, cerbos, gitea, wolfictl, src-fingerprint, syft, gptscript, kubescape, nuclei, dagger, pulumi-language-yaml, kyverno, argo-events, kaniko, kargo, skaffold, trivy-operator, zot,...
GO-2024-2947 vulnerabilities
Vulnerabilities for packages: tekton-chains, flux, zarf, terragrunt, grafana-mimir, rekor, cosign, crossplane-provider-azure-sql, terraform-provider-azurerm, k3d, flux-image-reflector-controller, aactl, opentelemetry-collector-contrib, sigstore-scaffolding, glab, src-fingerprint,...
CLEANSTART-2026-IM94158 Security fixes in pulumi-kubernetes-operator 0.18.0-r1
Package pulumi-kubernetes-operator version 0.18.0-r1 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-1229...
CLEANSTART-2026-WC86090 Security fixes in pulumi-kubernetes-operator 0.18.0-r2
Package pulumi-kubernetes-operator version 0.18.0-r2 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...
CLEANSTART-2026-YM63226 gRPC-Go is the Go language implementation of gRPC
Multiple security vulnerabilities affect the pulumi-kubernetes-operator package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-CK42797 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-1229, CVE-2026-25679, CVE-2026-25934, CVE-2026-27139, CVE-2026-27142, ghsa-37cx-329c-33x3 applied in versions: 0.18.0-r1, 1.16.0-r0
Multiple security vulnerabilities affect the pulumi-kubernetes-operator package. These issues are resolved in later releases. See references for individual vulnerability details...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: boring-registry, grafana-alloy, terragrunt, crossplane-provider-aws-route53, crossplane-provider-aws-firehose, terraform-provider-azurerm, docker-cli-buildx, src-fingerprint, aactl, dagger, helm-push, crossplane-provider-aws-eks, goreleaser,...
GHSA-Q9HV-HPM4-HJ6X vulnerabilities
Vulnerabilities for packages: boring-registry, grafana-alloy, terragrunt, crossplane-provider-aws-route53, crossplane-provider-aws-firehose, terraform-provider-azurerm, docker-cli-buildx, src-fingerprint, aactl, dagger, helm-push, crossplane-provider-aws-eks, goreleaser,...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: terraform-provider-databricks, crossplane-provider-family-azure, rancher-fleet-fips, grafana-alloy-fips, skaffold, crossplane-provider-aws-cognitoidentity, terraform-provider-azuread-fips, actions-runner-controller-fips, crossplane-provider-aws-cloudformation-fips,...
CVE-2023-49569 vulnerabilities
Vulnerabilities for packages: bom, gitness, pulumi-kubernetes-operator, scorecard, src-fingerprint, go-licenses, nuclei, gitsign, goreleaser...
CVE-2023-49569 vulnerabilities
Vulnerabilities for packages: nuclei, gitsign, pulumi-kubernetes-operator, goreleaser, go-licenses, gitness, src-fingerprint, scorecard, bom...
GHSA-449P-3H89-PW88 vulnerabilities
Vulnerabilities for packages: bom, gitness, pulumi-kubernetes-operator, scorecard, src-fingerprint, go-licenses, nuclei, gitsign, goreleaser...
GHSA-449P-3H89-PW88 vulnerabilities
Vulnerabilities for packages: nuclei, gitsign, pulumi-kubernetes-operator, goreleaser, go-licenses, gitness, src-fingerprint, scorecard, bom...
GHSA-9763-4F94-GFCH vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-ec2, crossplane-provider-aws-kms, skaffold, terragrunt, spire-server-fips, crossplane, sops, boring-registry, actions-runner-controller, crossplane-provider-family-aws, flux-notification-controller, melange, policy-controller,...
GHSA-3F2Q-6294-FMQ5 vulnerabilities
Vulnerabilities for packages: argo-events-fips, argo-workflows, pulumi-kubernetes-operator, snyk-cli, flux-notification-controller, melange, argo-events, task...