25 matches found
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: node-feature-discovery, zot, descheduler, keda, argocd-image-updater, flux-notification-controller, k3s, kapp-controller, cluster-api-provider-vsphere, cass-operator, cloud-provider-gcp-cloud-controller-manager, gitlab-kas, kubeflow-pipelines, hubble-ui, rancher-agen...
GO-2025-3367 vulnerabilities
Vulnerabilities for packages: dagger, zot, gitea, argocd-image-updater, trivy, pulumi-language-yaml, bom, grype, pulumi-kubernetes-operator, gptscript, flux-source-controller, crossplane, guac, kaniko, skaffold, nuclei, src-fingerprint, k8sgpt, flux, gitsign, flux-image-automation-controller,...
GO-2025-3368 vulnerabilities
Vulnerabilities for packages: dagger, zot, gitea, argocd-image-updater, trivy, pulumi-language-yaml, bom, grype, pulumi-kubernetes-operator, gptscript, flux-source-controller, crossplane, guac, kaniko, skaffold, nuclei, src-fingerprint, k8sgpt, flux, gitsign, flux-image-automation-controller,...
GO-2026-4910 vulnerabilities
Vulnerabilities for packages: dagger, witness, zot, gitea, argocd-image-updater, steampipe, trivy, trufflehog, argo-cd, pulumi-language-yaml, bom, teleport, grype, pulumi-kubernetes-operator, gitaly, gptscript, flux-source-controller, crossplane, guac, kaniko, skaffold, nuclei, src-fingerprint,...
GO-2024-2947 vulnerabilities
Vulnerabilities for packages: zot, flux-notification-controller, k3s, policy-controller, rook, crossplane-provider-azure-authorization, sops, opentelemetry-collector-contrib, aactl, pulumi-kubernetes-operator, crossplane-provider-azure-storage, tekton-chains, terragrunt,...
CLEANSTART-2026-IM94158 Security fixes in pulumi-kubernetes-operator 0.18.0-r1
Package pulumi-kubernetes-operator version 0.18.0-r1 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-1229...
CLEANSTART-2026-WC86090 Security fixes in pulumi-kubernetes-operator 0.18.0-r2
Package pulumi-kubernetes-operator version 0.18.0-r2 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...
CLEANSTART-2026-YM63226 gRPC-Go is the Go language implementation of gRPC
Multiple security vulnerabilities affect the pulumi-kubernetes-operator package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-CK42797 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-1229, CVE-2026-25679, CVE-2026-25934, CVE-2026-27139, CVE-2026-27142, ghsa-37cx-329c-33x3 applied in versions: 0.18.0-r1, 1.16.0-r0
Multiple security vulnerabilities affect the pulumi-kubernetes-operator package. These issues are resolved in later releases. See references for individual vulnerability details...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: zot, argocd-image-updater, flux-notification-controller, trivy, trufflehog, crossplane-provider-azure-authorization, crossplane-provider-aws-firehose, helm-push, ratify, sops, grype, src-fingerprint, crossplane-provider-aws-sqs, melange, crossplane-provider-aws-ec2,...
GHSA-Q9HV-HPM4-HJ6X vulnerabilities
Vulnerabilities for packages: zot, argocd-image-updater, flux-notification-controller, trivy, trufflehog, crossplane-provider-azure-authorization, crossplane-provider-aws-firehose, helm-push, ratify, sops, grype, src-fingerprint, crossplane-provider-aws-sqs, melange, crossplane-provider-aws-ec2,...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: terraform-fips, crossplane-provider-aws-eks-fips, omni, gitlab-operator, pulumi, gomplate-fips, external-secrets-operator-fips, ratify, ratify-fips, gitlab-rails-ce, argo-rollouts-fips, scorecard, atlantis, gitaly-fips, syft-fips, terraform-provider-databricks,...
CVE-2023-49569 vulnerabilities
Vulnerabilities for packages: gitness, go-licenses, scorecard, nuclei, src-fingerprint, bom, gitsign, pulumi-kubernetes-operator, goreleaser...
CVE-2023-49569 vulnerabilities
Vulnerabilities for packages: nuclei, src-fingerprint, bom, go-licenses, scorecard, gitness, goreleaser, pulumi-kubernetes-operator, gitsign...
GHSA-449P-3H89-PW88 vulnerabilities
Vulnerabilities for packages: gitness, go-licenses, scorecard, nuclei, src-fingerprint, bom, gitsign, pulumi-kubernetes-operator, goreleaser...
GHSA-449P-3H89-PW88 vulnerabilities
Vulnerabilities for packages: nuclei, src-fingerprint, bom, go-licenses, scorecard, gitness, goreleaser, pulumi-kubernetes-operator, gitsign...
GHSA-9763-4F94-GFCH vulnerabilities
Vulnerabilities for packages: spire-server, melange, crossplane-provider-aws-sns, pulumi-language-java, pulumi, slsa-verifier, crossplane-provider-aws-s3, rclone, scorecard, flux-kustomize-controller, flux-image-automation-controller, skaffold, tekton-chains, gitness, pulumi-language-dotnet,...
GHSA-3F2Q-6294-FMQ5 vulnerabilities
Vulnerabilities for packages: argo-events, snyk-cli, melange, argo-workflows, task, argo-events-fips, flux-notification-controller, pulumi-kubernetes-operator...