GO-2026-6354 vulnerabilities

Vulnerabilities for packages: terraform-fips, spire-server, wal-g-fips, gomplate-fips, external-secrets-operator-fips, frankenphp-8.2, gitlab-rails-ce, scorecard, commercial-gitlab-workhorse-ee-fips, prometheus, scc-fips, syft-fips, chainctl-fips, docker-cli-buildx-fips, mapotf, jfrog-cli,...

GO-2026-6355 vulnerabilities

Vulnerabilities for packages: terraform-fips, spire-server, wal-g-fips, gomplate-fips, external-secrets-operator-fips, frankenphp-8.2, gitlab-rails-ce, scorecard, commercial-gitlab-workhorse-ee-fips, prometheus, scc-fips, syft-fips, chainctl-fips, docker-cli-buildx-fips, mapotf, jfrog-cli,...

CVE-2026-78662 vulnerabilities

Vulnerabilities for packages: terraform-fips, spire-server, wal-g-fips, gomplate-fips, external-secrets-operator-fips, frankenphp-8.2, gitlab-rails-ce, scorecard, commercial-gitlab-workhorse-ee-fips, prometheus, scc-fips, syft-fips, chainctl-fips, docker-cli-buildx-fips, mapotf, jfrog-cli,...

CVE-2026-56855 vulnerabilities

Vulnerabilities for packages: zot, argocd-image-updater, flux-notification-controller, trivy, trufflehog, grype, opentelemetry-collector-contrib, rancher-agent, act, melange, gitlab-runner, podman, nfpm, k9s, pulumi-language-java, telegraf, cerbos, kine, syft, argo-workflows, gh, litestream, apko...

GO-2026-6354 vulnerabilities

Vulnerabilities for packages: zot, argocd-image-updater, flux-notification-controller, trivy, trufflehog, grype, opentelemetry-collector-contrib, rancher-agent, act, melange, gitlab-runner, podman, nfpm, k9s, pulumi-language-java, telegraf, cerbos, kine, syft, argo-workflows, gh, litestream, apko...

CVE-2026-78662 vulnerabilities

Vulnerabilities for packages: zot, argocd-image-updater, flux-notification-controller, trivy, trufflehog, grype, opentelemetry-collector-contrib, rancher-agent, act, melange, gitlab-runner, podman, nfpm, k9s, pulumi-language-java, telegraf, cerbos, kine, syft, argo-workflows, gh, litestream, apko...

GO-2026-6355 vulnerabilities

Vulnerabilities for packages: zot, argocd-image-updater, flux-notification-controller, trivy, trufflehog, grype, opentelemetry-collector-contrib, rancher-agent, act, melange, gitlab-runner, podman, nfpm, k9s, pulumi-language-java, telegraf, cerbos, kine, syft, argo-workflows, gh, litestream, apko...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: dagger, step, k8sgpt-operator, zot, k3s, trivy, certificate-transparency, sops, opentelemetry-collector-contrib, hubble-ui, temporal, grpc-health-probe, smarter-device-manager, terragrunt, conftest, ksops, kaniko, falcosidekick, guac, cilium-cli, sigstore-scaffolding...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: dagger, zot, gitea, argocd-image-updater, trivy, pulumi-language-yaml, bom, grype, pulumi-kubernetes-operator, gptscript, flux-source-controller, crossplane, guac, kaniko, skaffold, nuclei, src-fingerprint, k8sgpt, flux, gitsign, flux-image-automation-controller,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: dagger, zot, gitea, argocd-image-updater, trivy, pulumi-language-yaml, bom, grype, pulumi-kubernetes-operator, gptscript, flux-source-controller, crossplane, guac, kaniko, skaffold, nuclei, src-fingerprint, k8sgpt, flux, gitsign, flux-image-automation-controller,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: dagger, witness, zot, gitea, argocd-image-updater, steampipe, trivy, trufflehog, argo-cd, pulumi-language-yaml, bom, teleport, grype, pulumi-kubernetes-operator, gitaly, gptscript, flux-source-controller, crossplane, guac, kaniko, skaffold, nuclei, src-fingerprint,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: zot, argocd-image-updater, flux-notification-controller, trivy, crossplane-provider-azure-authorization, crossplane-provider-aws-firehose, sops, grype, rancher-agent, tekton-chains, act, neuvector-sigstore-interface, terraform-provider-tls, crossplane-provider-aws-sq...

CLEANSTART-2026-MH83831 Security fixes in pulumi-language-dotnet 3.103.0-r1

Package pulumi-language-dotnet version 3.103.0-r1 fixes 1 vulnerabilities: ghsa-3xc5-wrhm-f963...

PT-2026-85960

Package pulumi-language-dotnet version 3.103.0-r1 fixes 1 vulnerabilities: ghsa-3xc5-wrhm-f963...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: zot, descheduler, trivy, crossplane-provider-aws-firehose, sops, opentelemetry-collector-contrib, cert-manager-webhook-pdns, cloud-sql-proxy, kubo, nova, crossplane-provider-aws-sqs, melange, crossplane-provider-aws-ec2, crossplane-provider-aws-dynamodb, gitlab-runne...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: zot, descheduler, trivy, crossplane-provider-aws-firehose, sops, opentelemetry-collector-contrib, cert-manager-webhook-pdns, cloud-sql-proxy, kubo, nova, crossplane-provider-aws-sqs, melange, crossplane-provider-aws-ec2, crossplane-provider-aws-dynamodb, gitlab-runne...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: pulumi, slsa-verifier, prometheus-node-exporter-fips, trillian-fips, metrics-server, falcoctl-fips, rqlite, cfssl, hugo-extended, stakater-reloader, buildkitd, nerdctl, restic, k3d, step, actions-runner-controller, kiam, kaniko, fulcio-fips, kpt,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: up, kubescape, scorecard, kubeflow, cortex, k3d, spark-operator, buildkitd, slsa-verifier, terraform-provider-sendgrid, src, kubevela, aactl, dgraph...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: up, plutono-fips, prometheus-adapter-fips, kubernetes-csi-livenessprobe, bank-vaults-fips, cortex, slsa-verifier, scorecard, conftest-fips, vault-csi-provider, terraform-provider-sendgrid, dynamic-localpv-provisioner-fips, kubevela, falcoctl-fips,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: frp, flux-notification-controller, grpcurl, grype, stakater-reloader, prometheus-adapter, terraform-provider-sendgrid, kubernetes-csi-livenessprobe, nginx-mainline, nats, mc, nginx-stable, pulumi-language-java, flux-kustomize-controller, amass, wireguard-go, kaf,...