GO-2026-6258 vulnerabilities

Vulnerabilities for packages: tempo-fips, thanos-receive-controller-fips, cortex-fips, thanos-fips, cortex-geomys-fips, thanos, tempo, cortex, thanos-receive-controller, pulumi-language-yaml...

GO-2026-6258 vulnerabilities

Vulnerabilities for packages: thanos, pulumi-language-yaml, cortex...

GO-2026-6090 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, nri-mongodb, spire-controller-manager, restic, gogatekeeper, aws-flb-firehose, amazon-cloudwatch-agent-operator, containerd, docker-machine-driver-linode, newrelic-nri-statsd, amass, victoriametrics-cluster, esbuild, spicedb-operator, whereabouts,...

CVE-2026-56862 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, nri-mongodb, spire-controller-manager, restic, gogatekeeper, aws-flb-firehose, amazon-cloudwatch-agent-operator, containerd, docker-machine-driver-linode, newrelic-nri-statsd, amass, victoriametrics-cluster, esbuild, spicedb-operator, whereabouts,...

CVE-2026-56860 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, spire-controller-manager, restic, gogatekeeper, aws-flb-firehose, amazon-cloudwatch-agent-operator, containerd, docker-machine-driver-linode, newrelic-nri-statsd, amass, victoriametrics-cluster, esbuild, spicedb-operator, whereabouts, nri-rabbitmq,...

GO-2026-6218 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, spire-controller-manager, restic, gogatekeeper, aws-flb-firehose, amazon-cloudwatch-agent-operator, containerd, docker-machine-driver-linode, newrelic-nri-statsd, amass, victoriametrics-cluster, esbuild, spicedb-operator, whereabouts, nri-rabbitmq,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: flagger-fips, goose, crossplane-provider-aws-efs, ollama-fips, vault-secrets-operator, terraform-provider-pagerduty-fips, k8s-device-plugin, redpanda, spire-controller-manager, restic, amazon-ecs-agent, gogatekeeper, kubernetes-csi-driver-nfs, mattermost-fips,...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: amazon-ssm-agent, crossplane-provider-keycloak-fips, restic, crossplane-provider-sql-fips, crossplane-provider-aws-elasticache, amazon-cloudwatch-agent-operator, containerd, kots, neuvector-sigstore-interface, newrelic-nri-statsd, amass, prometheus-podman-exporter,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: bom, dagger, goreleaser, tfsec, gitsign, zot, pulumi-language-yaml, zarf, flux-image-automation-controller, gptscript, kots, k8sgpt, go-licenses, pulumi, kargo, nuclei, kubevela, kaniko, snyk-cli, task, flux-source-controller, chezmoi, argocd-image-updater,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: bom, dagger, goreleaser, tfsec, gitsign, zot, pulumi-language-yaml, zarf, flux-image-automation-controller, gptscript, kots, k8sgpt, go-licenses, pulumi, kargo, nuclei, kubevela, kaniko, snyk-cli, task, flux-source-controller, chezmoi, argocd-image-updater,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: kyverno, bom, dagger, tfsec, external-secrets-operator, gitsign, gitlab-runner, zot, pulumi-language-yaml, zarf, flux-image-automation-controller, gptscript, kots, trufflehog, trivy-operator, pulumi, kargo, nuclei, kubevela, kaniko, snyk-cli, witness,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: dagger, loki, eksctl, rancher, gitlab-runner, crossplane-provider-aws-elasticache, flux-image-automation-controller, containerd, kots, docker-machine-driver-linode, neuvector-sigstore-interface, falcoctl, prometheus-operator, external-dns,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: kyverno, bom, dagger, goreleaser, tfsec, external-secrets-operator, gitsign, gitlab-runner, zot, pulumi-language-yaml, zarf, flux-image-automation-controller, gptscript, kots, trufflehog, trivy-operator, pulumi, terragrunt, act, kargo, nuclei, kubevela, kaniko,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: dagger, amazon-ssm-agent, chainloop-cli-fips, kubescape-server-fips, external-secrets-operator-fips, goreleaser, gitlab-runner, gitsign, terragrunt-fips, flux-image-automation-controller, kots, grype-db, chainloop-cli, mapotf, k9s-fips, argo-cd-fips, argo-workflows,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: dagger, amazon-ssm-agent, chainloop-cli-fips, kubescape-server-fips, external-secrets-operator-fips, goreleaser, gitlab-runner, gitsign, terragrunt-fips, flux-image-automation-controller, kots, grype-db, chainloop-cli, mapotf, k9s-fips, argo-cd-fips, argo-workflows,...

CLEANSTART-2026-FO49462 Security fixes for ghsa-3xc5-wrhm-f963 applied in versions: 1.31.1-r0

Security vulnerability affects the pulumi-language-yaml package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: dagger, amazon-ssm-agent, kubescape-server-fips, external-secrets-operator-fips, gitlab-runner, gitsign, flux-image-automation-controller, kots, grype-db, k9s-fips, argo-cd-fips, argo-workflows, grype-fips, crossplane-fips, argo-cd, trufflehog-fips, zarf-fips,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: dagger, amazon-ssm-agent, kubescape-server-fips, external-secrets-operator-fips, gitlab-runner, gitsign, flux-image-automation-controller, kots, grype-db, k9s-fips, argo-cd-fips, argo-workflows, grype-fips, crossplane-fips, argo-cd, trufflehog-fips, zarf-fips,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: kyverno, bom, dagger, tfsec, external-secrets-operator, gitsign, gitlab-runner, zot, pulumi-language-yaml, zarf, flux-image-automation-controller, gptscript, kots, trufflehog, trivy-operator, pulumi, kargo, nuclei, kubevela, kaniko, snyk-cli, witness,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: kyverno, bom, dagger, tfsec, external-secrets-operator, gitsign, gitlab-runner, zot, pulumi-language-yaml, zarf, flux-image-automation-controller, gptscript, kots, trufflehog, trivy-operator, pulumi, kargo, nuclei, kubevela, kaniko, snyk-cli, witness,...