25 matches found
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: cloud-provider-aws, pulumi-kubernetes-operator, cluster-api-gcp-controller, hubble-ui, helm-operator, yunikorn-k8shim, telegraf, kubernetes-csi-external-provisioner, cluster-api-azure-controller, kubernetes-csi-external-snapshotter, cluster-api, tetragon,...
GO-2025-3367 vulnerabilities
Vulnerabilities for packages: goreleaser, timoni, pulumi-kubernetes-operator, pulumi, trivy, kargo, argo-workflows, guac, flux-image-automation-controller, go-licenses, task, gitsign, osv-scanner, dagger, bom, kots, pulumi-language-yaml, zot, nuclei, chezmoi, flux, crossplane, zarf, grype,...
GO-2025-3368 vulnerabilities
Vulnerabilities for packages: goreleaser, timoni, pulumi-kubernetes-operator, pulumi, trivy, kargo, argo-workflows, guac, flux-image-automation-controller, go-licenses, task, gitsign, osv-scanner, dagger, bom, kots, pulumi-language-yaml, zot, nuclei, chezmoi, flux, crossplane, zarf, grype,...
GO-2026-4910 vulnerabilities
Vulnerabilities for packages: pulumi-kubernetes-operator, pulumi, trivy, kargo, argo-workflows, guac, flux-image-automation-controller, steampipe, gitsign, osv-scanner, teleport, argo-cd, dagger, bom, kots, pulumi-language-yaml, zot, nuclei, chezmoi, flux, gitlab-runner, xeol, crossplane, zarf,...
GO-2024-2947 vulnerabilities
Vulnerabilities for packages: crossplane-provider-family-azure, goreleaser, step-ca, pulumi-kubernetes-operator, pulumi, kubernetes-event-exporter, terraform-provider-azurerm, crossplane-provider-azure-storage, kargo, opentelemetry-collector, sigstore-scaffolding, spire-server, guac, buildkitd,...
CLEANSTART-2026-IM94158 Security fixes in pulumi-kubernetes-operator 0.18.0-r1
Package pulumi-kubernetes-operator version 0.18.0-r1 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-1229...
CLEANSTART-2026-WC86090 Security fixes in pulumi-kubernetes-operator 0.18.0-r2
Package pulumi-kubernetes-operator version 0.18.0-r2 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...
CLEANSTART-2026-YM63226 gRPC-Go is the Go language implementation of gRPC
Multiple security vulnerabilities affect the pulumi-kubernetes-operator package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-CK42797 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-1229, CVE-2026-25679, CVE-2026-25934, CVE-2026-27139, CVE-2026-27142, ghsa-37cx-329c-33x3 applied in versions: 0.18.0-r1, 1.16.0-r0
Multiple security vulnerabilities affect the pulumi-kubernetes-operator package. These issues are resolved in later releases. See references for individual vulnerability details...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: cilium-cli, crossplane-provider-aws-s3, pulumi-kubernetes-operator, terraform-provider-azurerm, crossplane-provider-azure-storage, crossplane-provider-aws-sns, crossplane-provider-aws-rds, guac, rclone, osv-scanner, cluster-api, gitness, crossplane-provider-family-aw...
GHSA-Q9HV-HPM4-HJ6X vulnerabilities
Vulnerabilities for packages: cilium-cli, crossplane-provider-aws-s3, pulumi-kubernetes-operator, terraform-provider-azurerm, crossplane-provider-azure-storage, crossplane-provider-aws-sns, crossplane-provider-aws-rds, guac, rclone, osv-scanner, cluster-api, gitness, crossplane-provider-family-aw...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: atlantis-fips, argo-events, pulumi, witness, cilium-cli, docker, gitaly, trivy-operator, xeol, image-factory, argo-workflows-fips, helm-diff-fips, flux-fips, crossplane-provider-aws-firehose-fips, rclone, syft-fips, crossplane-provider-aws-iam-fips, rancher-fleet,...
CVE-2023-49569 vulnerabilities
Vulnerabilities for packages: nuclei, bom, src-fingerprint, go-licenses, gitsign, pulumi-kubernetes-operator, gitness, scorecard, goreleaser...
CVE-2023-49569 vulnerabilities
Vulnerabilities for packages: goreleaser, pulumi-kubernetes-operator, scorecard, bom, nuclei, src-fingerprint, go-licenses, gitness, gitsign...
GHSA-449P-3H89-PW88 vulnerabilities
Vulnerabilities for packages: nuclei, bom, src-fingerprint, go-licenses, gitsign, pulumi-kubernetes-operator, gitness, scorecard, goreleaser...
GHSA-449P-3H89-PW88 vulnerabilities
Vulnerabilities for packages: goreleaser, pulumi-kubernetes-operator, scorecard, bom, nuclei, src-fingerprint, go-licenses, gitness, gitsign...
GHSA-9763-4F94-GFCH vulnerabilities
Vulnerabilities for packages: aactl, gomplate, pulumi, crossplane-provider-aws-sqs, pulumi-language-java, terragrunt, crossplane-provider-aws, crossplane-provider-aws-memorydb, terraform-provider-google, sops, flux-source-controller, crossplane-provider-aws-ec2, boring-registry, rclone,...
GHSA-3F2Q-6294-FMQ5 vulnerabilities
Vulnerabilities for packages: argo-events, argo-workflows, task, flux-notification-controller, melange, argo-events-fips, snyk-cli, pulumi-kubernetes-operator...