GO-2026-6258 vulnerabilities

Vulnerabilities for packages: tempo-fips, tempo, thanos-fips, thanos, pulumi-language-yaml, thanos-receive-controller, thanos-receive-controller-fips, cortex-fips, cortex-geomys-fips, cortex...

GO-2026-6258 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, cortex, thanos...

GO-2026-6090 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-route53, rclone, nats-top, victoriametrics-operator, steampipe, cert-manager-istio-csr, rabbitmq-default-user-credential-updater, vault-env, buildkitd, harbor, falcosidekick, skopeo, task, docker-credential-acr-env, nri-elasticsearch, cri-tool...

CVE-2026-56862 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-route53, rclone, nats-top, victoriametrics-operator, steampipe, cert-manager-istio-csr, rabbitmq-default-user-credential-updater, vault-env, buildkitd, harbor, falcosidekick, skopeo, task, docker-credential-acr-env, nri-elasticsearch, cri-tool...

CVE-2026-56860 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-route53, rclone, nats-top, victoriametrics-operator, steampipe, cert-manager-istio-csr, rabbitmq-default-user-credential-updater, vault-env, buildkitd, harbor, falcosidekick, skopeo, task, docker-credential-acr-env, nri-elasticsearch, cri-tool...

GO-2026-6218 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-route53, rclone, nats-top, victoriametrics-operator, steampipe, cert-manager-istio-csr, rabbitmq-default-user-credential-updater, vault-env, buildkitd, harbor, falcosidekick, skopeo, task, docker-credential-acr-env, nri-elasticsearch, cri-tool...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: prometheus-mysqld-exporter-fips, mcp-grafana-fips, mc, mc-fips, openbao-fips, knative-operator, librechat, zarf, crossplane-function-auto-ready-fips, cloud-provider-azure-fips, tempo, cass-operator-fips, crossplane-function-go-templating-fips, kube-conformance,...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: prometheus-mysqld-exporter-fips, hcloud, gostatsd, mc, mc-fips, task, openbao-fips, zarf, flannel, cloud-provider-azure-fips, nerdctl, filebrowser, prometheus-mongodb-exporter, ferretdb, kiam, portieris-fips, crossplane-provider-azure, buildah, helm-operator,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: bom, flux-image-automation-controller, scorecard, steampipe, argo-cd, osv-scanner, kubevela, trufflehog, dagger, kubescape, guac, melange, pulumi-language-dotnet, gitea, syft, external-secrets-operator, argocd-image-updater, trivy-operator, zarf, chezmoi, flux,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: bom, flux-image-automation-controller, scorecard, go-licenses, osv-scanner, kubevela, dagger, k8sgpt, guac, kubescape, melange, gitea, pulumi-language-dotnet, syft, argocd-image-updater, zarf, task, chezmoi, flux, pulumi-language-yaml, zot, k9s, nuclei,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: bom, flux-image-automation-controller, scorecard, go-licenses, osv-scanner, kubevela, dagger, k8sgpt, guac, kubescape, melange, gitea, pulumi-language-dotnet, syft, argocd-image-updater, zarf, task, chezmoi, flux, pulumi-language-yaml, zot, k9s, nuclei,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis, crossplane-provider-aws-route53, steampipe, cilium-cli, buildkitd, tflint, caddy, crossplane-provider-aws-kms, k8sgpt, guac, pulumi-language-dotnet, tkn, crossplane-provider-aws-lambda, atlantis, kaf, rancher-machine, step-kms-plugin,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: bom, flux-image-automation-controller, scorecard, steampipe, argo-cd, osv-scanner, kubevela, trufflehog, dagger, kubescape, act, guac, melange, gitea, pulumi-language-dotnet, external-secrets-operator, argocd-image-updater, syft, trivy-operator, zarf, flux,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: trufflehog, trivy-operator, nfpm, zarf, scorecard, syft-fips, chainctl, argo-workflows, kyverno-fips, flux, kubescape-server, kyverno, mapotf, pulumi, trufflehog-fips, cloudbeat, kaniko-fips, cg, gitlab-rails-ce-fips, pulumi-language-yaml, grype-fips,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: trufflehog, trivy-operator, nfpm, zarf, scorecard, syft-fips, chainctl, argo-workflows, kyverno-fips, flux, kubescape-server, kyverno, mapotf, pulumi, trufflehog-fips, cloudbeat, kaniko-fips, cg, gitlab-rails-ce-fips, pulumi-language-yaml, grype-fips,...

CLEANSTART-2026-FO49462 Security fixes for ghsa-3xc5-wrhm-f963 applied in versions: 1.31.1-r0

Security vulnerability affects the pulumi-language-yaml package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-36553

Security vulnerability affects the pulumi-language-yaml package. This issue is resolved in later releases. See references for vulnerability details...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: trufflehog, commercial-chainloop-cli, trivy-operator, nfpm, zarf, scorecard, syft-fips, chainctl, argo-workflows, kyverno-fips, flux, kubescape-server, kyverno, pulumi, trufflehog-fips, cloudbeat, kaniko-fips, cg, gitlab-rails-ce-fips, pulumi-language-yaml, grype-fip...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: trufflehog, commercial-chainloop-cli, trivy-operator, nfpm, zarf, scorecard, syft-fips, chainctl, argo-workflows, kyverno-fips, flux, kubescape-server, kyverno, pulumi, trufflehog-fips, cloudbeat, kaniko-fips, cg, gitlab-rails-ce-fips, pulumi-language-yaml, grype-fip...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: bom, flux-image-automation-controller, scorecard, steampipe, argo-cd, osv-scanner, kubevela, trufflehog, dagger, kubescape, guac, melange, pulumi-language-dotnet, gitea, syft, external-secrets-operator, argocd-image-updater, trivy-operator, zarf, chezmoi, flux,...