GO-2026-6090 vulnerabilities

Vulnerabilities for packages: crossplane-provider-sql, crossplane-provider-aws-firehose, cass-operator, atlantis, nsc, hubble, temporal, rancher-agent, sftpgo-plugin-auth, victoriametrics-operator, flux-image-reflector-controller, pvc-autoresizer, swagger, q, argo-workflows, influx, pguser,...

CVE-2026-56862 vulnerabilities

Vulnerabilities for packages: crossplane-provider-sql, crossplane-provider-aws-firehose, cass-operator, atlantis, nsc, hubble, temporal, rancher-agent, sftpgo-plugin-auth, victoriametrics-operator, flux-image-reflector-controller, pvc-autoresizer, swagger, q, argo-workflows, influx, pguser,...

CVE-2026-56860 vulnerabilities

Vulnerabilities for packages: crossplane-provider-sql, crossplane-provider-aws-firehose, cass-operator, atlantis, nsc, hubble, temporal, rancher-agent, sftpgo-plugin-auth, victoriametrics-operator, flux-image-reflector-controller, pvc-autoresizer, swagger, q, argo-workflows, influx, pguser,...

GO-2026-6218 vulnerabilities

Vulnerabilities for packages: crossplane-provider-sql, crossplane-provider-aws-firehose, cass-operator, atlantis, nsc, hubble, temporal, rancher-agent, sftpgo-plugin-auth, victoriametrics-operator, flux-image-reflector-controller, pvc-autoresizer, swagger, q, argo-workflows, influx, pguser,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: prometheus-operator, spiffe-helper, thanos, kube-state-metrics, apm-server-fips, kpt, nvidia-container-toolkit, k6-fips, gitaly, crossplane-provider-aws-memorydb, tigera-operator, crossplane-function-go-templating, cass-operator, kubernetes-dashboard-api-fips,...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: prometheus-operator, spiffe-helper, kubernetes-dns-node-cache-fips, thanos, kube-state-metrics, aactl, flux-image-automation-controller-fips, crossplane-provider-aws-memorydb, tigera-operator, gitea, kubernetes-dashboard-api-fips, scorecard, istio-pilot-discovery,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: pulumi, pulumi-language-dotnet, tfsec, trivy, task, bom, syft, flux-image-automation-controller, kubescape, nuclei, argocd-image-updater, wolfictl, guac, pulumi-kubernetes-operator, k8sgpt, timoni, scorecard, chezmoi, argo-events, skaffold, goreleaser, snyk-cli,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: pulumi, pulumi-language-dotnet, tfsec, trivy, task, bom, syft, flux-image-automation-controller, kubescape, nuclei, argocd-image-updater, wolfictl, guac, pulumi-kubernetes-operator, k8sgpt, timoni, scorecard, chezmoi, argo-events, skaffold, goreleaser, snyk-cli,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: cerbos, pulumi, pulumi-language-dotnet, tfsec, trivy, argo-cd, bom, syft, flux-image-automation-controller, kubescape, nuclei, argocd-image-updater, wolfictl, witness, kyverno, guac, nfpm, pulumi-kubernetes-operator, trivy-operator, scorecard, chezmoi, argo-events,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: kubernetes, nuclei, argocd-image-updater, crossplane-provider-aws-firehose, atlantis, cloudflared, ko, pulumi-kubernetes-operator, step-kms-plugin, containerd, caddy, crossplane-provider-aws-sqs, gatus, splunk-otel-collector, crossplane-provider-aws-route53, fscrypt,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: cerbos, pulumi, pulumi-language-dotnet, tfsec, trivy, argo-cd, bom, syft, flux-image-automation-controller, kubescape, nuclei, argocd-image-updater, wolfictl, witness, kyverno, guac, nfpm, pulumi-kubernetes-operator, trivy-operator, scorecard, argo-events, teleport,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: chainloop-cli-fips, cg, chainloop-cli, goreleaser, k9s-fips, gitaly, grype-db, gitea, argo-cd-fips, xeol-fips, kyverno, scorecard, cerbos-fips, nfpm, packer, crossplane, flux-fips, terragrunt-fips, gitlab-runner-fips, redpanda-console, syft, kubescape-server-fips,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: chainloop-cli-fips, cg, chainloop-cli, goreleaser, k9s-fips, gitaly, grype-db, gitea, argo-cd-fips, xeol-fips, kyverno, scorecard, cerbos-fips, nfpm, packer, crossplane, flux-fips, terragrunt-fips, gitlab-runner-fips, redpanda-console, syft, kubescape-server-fips,...

CLEANSTART-2026-FO49462 Security fixes for ghsa-3xc5-wrhm-f963 applied in versions: 1.31.1-r0

Security vulnerability affects the pulumi-language-yaml package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: cg, k9s-fips, flux-image-automation-controller-fips, gitaly, grype-db, gitea, argo-cd-fips, xeol-fips, kyverno, scorecard, cerbos-fips, nfpm, packer, crossplane, flux-fips, gitlab-runner-fips, commercial-chainloop-cli, syft, kubescape-server-fips, grafana-alloy-fips,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: cg, k9s-fips, flux-image-automation-controller-fips, gitaly, grype-db, gitea, argo-cd-fips, xeol-fips, kyverno, scorecard, cerbos-fips, nfpm, packer, crossplane, flux-fips, gitlab-runner-fips, commercial-chainloop-cli, syft, kubescape-server-fips, grafana-alloy-fips,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: cerbos, pulumi, pulumi-language-dotnet, tfsec, trivy, argo-cd, bom, syft, flux-image-automation-controller, kubescape, nuclei, argocd-image-updater, wolfictl, witness, kyverno, guac, nfpm, pulumi-kubernetes-operator, trivy-operator, scorecard, chezmoi, argo-events,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: cerbos, pulumi, pulumi-language-dotnet, tfsec, trivy, argo-cd, bom, syft, flux-image-automation-controller, kubescape, nuclei, argocd-image-updater, wolfictl, witness, kyverno, guac, nfpm, pulumi-kubernetes-operator, trivy-operator, scorecard, chezmoi, argo-events,...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: cerbos, pulumi, pulumi-language-dotnet, tfsec, trivy, argo-cd, bom, syft, flux-image-automation-controller, kubescape, nuclei, argocd-image-updater, wolfictl, witness, kyverno, guac, nfpm, pulumi-kubernetes-operator, trivy-operator, scorecard, chezmoi, argo-events,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: cerbos, pulumi, pulumi-language-dotnet, tfsec, trivy, argo-cd, bom, syft, flux-image-automation-controller, kubescape, nuclei, argocd-image-updater, wolfictl, witness, kyverno, guac, nfpm, pulumi-kubernetes-operator, trivy-operator, scorecard, chezmoi, argo-events,...