GO-2026-6090 vulnerabilities

Vulnerabilities for packages: terragrunt, pgpool2exporter, kine, aws-nuke, nri-haproxy, cloud-provider-vsphere, contour, kubernetes-csi-external-resizer, osv-scanner, crossplane-provider-aws-ec2, ip-masq-agent, kubernetes-ingress-defaultbackend, lvm-driver, docker-credential-ecr-login, amass, wav...

CVE-2026-56862 vulnerabilities

Vulnerabilities for packages: terragrunt, pgpool2exporter, kine, aws-nuke, nri-haproxy, cloud-provider-vsphere, contour, kubernetes-csi-external-resizer, osv-scanner, crossplane-provider-aws-ec2, ip-masq-agent, kubernetes-ingress-defaultbackend, lvm-driver, docker-credential-ecr-login, amass, wav...

CVE-2026-56860 vulnerabilities

Vulnerabilities for packages: terragrunt, pgpool2exporter, kine, aws-nuke, nri-haproxy, cloud-provider-vsphere, contour, kubernetes-csi-external-resizer, osv-scanner, crossplane-provider-aws-ec2, ip-masq-agent, lvm-driver, docker-credential-ecr-login, amass, wave, kubernetes-csi-driver-hostpath,...

GO-2026-6218 vulnerabilities

Vulnerabilities for packages: terragrunt, pgpool2exporter, kine, aws-nuke, nri-haproxy, cloud-provider-vsphere, contour, kubernetes-csi-external-resizer, osv-scanner, crossplane-provider-aws-ec2, ip-masq-agent, lvm-driver, docker-credential-ecr-login, amass, wave, kubernetes-csi-driver-hostpath,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: crossplane-provider-gcp, crossplane-provider-aws-cloudwatchlogs, kubernetes-csi-external-resizer-fips, authservice, kube-conformance, crossplane-provider-aws-elasticache, gitlab-kas, crossplane-provider-aws-route53-fips, kyverno-policy-reporter, policy-bot,...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: crossplane-provider-gcp, crossplane-provider-aws-cloudwatchlogs, dockerize, local-path-provisioner-fips, rancher-fleet, authservice, cert-exporter-fips, crossplane-provider-aws-elasticache, hugo-extended, weaviate, flux-helm-controller-fips, kyverno-policy-reporter,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, go-licenses, kots, pulumi-kubernetes-operator, goreleaser, apko, trivy, zot, pulumi-language-java, pulumi, syft, flux-image-automation-controller, flux-kustomize-controller, guac, melange, osv-scanner, kargo, argocd-image-updater, dagger, tfsec,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, go-licenses, kots, pulumi-kubernetes-operator, goreleaser, apko, trivy, zot, pulumi-language-java, pulumi, syft, flux-image-automation-controller, flux-kustomize-controller, guac, melange, osv-scanner, kargo, argocd-image-updater, dagger, tfsec,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, gitaly, external-secrets-operator, gomplate, kots, pulumi-kubernetes-operator, rancher-fleet, apko, trivy, zot, pulumi-language-java, pulumi, syft, flux-image-automation-controller, guac, melange, osv-scanner, kargo, kyverno, argocd-image-update...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-firehose, pulumi-language-yaml, terragrunt, kine, kots, docker-machine-driver-linode, traefik, cloudflared, step-issuer, datadog-agent, osv-scanner, crossplane-provider-aws-sqs, kargo, kyverno, crossplane-provider-aws-ec2, openbao, glab, tflin...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, terragrunt, gitaly, external-secrets-operator, gomplate, kots, pulumi-kubernetes-operator, rancher-fleet, goreleaser, apko, trivy, zot, pulumi-language-java, pulumi, syft, flux-image-automation-controller, guac, melange, osv-scanner, kargo,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: gitea-fips, rancher-fleet, act, crossplane-fips, flux-fips, gitlab-rails-ce-fips, grype-db, snyk-cli, redpanda-console, argo-workflows, kubevela, amazon-ssm-agent-fips, apko, crossplane, rancher-fleet-fips, chainloop-cli-fips, nuclei, syft-fips, chainloop-cli,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: gitea-fips, rancher-fleet, act, crossplane-fips, flux-fips, gitlab-rails-ce-fips, grype-db, snyk-cli, redpanda-console, argo-workflows, kubevela, amazon-ssm-agent-fips, apko, crossplane, rancher-fleet-fips, chainloop-cli-fips, nuclei, syft-fips, chainloop-cli,...

CLEANSTART-2026-FO49462 Security fixes for ghsa-3xc5-wrhm-f963 applied in versions: 1.31.1-r0

Security vulnerability affects the pulumi-language-yaml package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: gitea-fips, rancher-fleet, crossplane-fips, flux-fips, gitlab-rails-ce-fips, grype-db, snyk-cli, argo-workflows, kubevela, amazon-ssm-agent-fips, apko, crossplane, rancher-fleet-fips, nuclei, syft-fips, argo-workflows-fips, argo-events-fips, gitaly-fips, trivy-fips,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: gitea-fips, rancher-fleet, crossplane-fips, flux-fips, gitlab-rails-ce-fips, grype-db, snyk-cli, argo-workflows, kubevela, amazon-ssm-agent-fips, apko, crossplane, rancher-fleet-fips, nuclei, syft-fips, argo-workflows-fips, argo-events-fips, gitaly-fips, trivy-fips,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, gitaly, external-secrets-operator, gomplate, kots, pulumi-kubernetes-operator, rancher-fleet, apko, trivy, zot, pulumi-language-java, pulumi, syft, flux-image-automation-controller, guac, melange, osv-scanner, kargo, kyverno, argocd-image-update...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, gitaly, external-secrets-operator, gomplate, kots, pulumi-kubernetes-operator, rancher-fleet, apko, trivy, zot, pulumi-language-java, pulumi, syft, flux-image-automation-controller, guac, melange, osv-scanner, kargo, kyverno, argocd-image-update...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, gitaly, external-secrets-operator, gomplate, kots, pulumi-kubernetes-operator, rancher-fleet, apko, trivy, zot, pulumi-language-java, pulumi, syft, flux-image-automation-controller, guac, melange, osv-scanner, kargo, kyverno, argocd-image-update...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, gitaly, external-secrets-operator, gomplate, kots, pulumi-kubernetes-operator, rancher-fleet, apko, trivy, zot, pulumi-language-java, pulumi, syft, flux-image-automation-controller, guac, melange, osv-scanner, kargo, kyverno, argocd-image-update...