GO-2026-6090 vulnerabilities

Vulnerabilities for packages: portieris, nri-redis, argo-workflows, nri-haproxy, scorecard, crossplane-provider-aws-sns, slsa-verifier, kaf, kubernetes-csi-node-driver-registrar, rancher-telemetry, dbmate, kapp-controller, ghaudit, argo-cd, tekton-chains, net-kourier, rclone, smokescreen,...

CVE-2026-56862 vulnerabilities

Vulnerabilities for packages: portieris, nri-redis, argo-workflows, nri-haproxy, scorecard, crossplane-provider-aws-sns, slsa-verifier, kaf, kubernetes-csi-node-driver-registrar, rancher-telemetry, dbmate, kapp-controller, ghaudit, argo-cd, tekton-chains, net-kourier, rclone, smokescreen,...

CVE-2026-56860 vulnerabilities

Vulnerabilities for packages: portieris, argo-workflows, nri-haproxy, scorecard, crossplane-provider-aws-sns, slsa-verifier, kaf, kubernetes-csi-node-driver-registrar, rancher-telemetry, dbmate, kapp-controller, ghaudit, argo-cd, tekton-chains, net-kourier, rclone, smokescreen,...

GO-2026-6218 vulnerabilities

Vulnerabilities for packages: portieris, argo-workflows, nri-haproxy, scorecard, crossplane-provider-aws-sns, slsa-verifier, kaf, kubernetes-csi-node-driver-registrar, rancher-telemetry, dbmate, kapp-controller, ghaudit, argo-cd, tekton-chains, net-kourier, rclone, smokescreen,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: apm-server-fips, cloud-provider-azure-fips, temporal-server, crossplane-function-go-templating-fips, kubevela, aws-flb-kinesis, deck-fips, google-guest-agent, dcgm-exporter, helm-diff, sops-fips, crossplane-provider-aws-cloudformation, trivy-fips,...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: cloud-provider-azure-fips, temporal-server, kubevela, istio-pilot-discovery, google-guest-agent, dcgm-exporter, sops-fips, crossplane-provider-aws-cloudformation, trivy-fips, amazon-cloudwatch-agent-operator-fips, crossplane-provider-aws-kms, sftpgo-plugin-auth,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: gitsign, pulumi-language-java, dagger, zarf, go-licenses, gitea, argo-workflows, flux-source-controller, nuclei, kots, melange, osv-scanner, kubescape, scorecard, apko, syft, gptscript, trivy, pulumi-language-dotnet, argo-events, crossplane, kargo, guac, bom,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: gitsign, pulumi-language-java, dagger, zarf, go-licenses, gitea, argo-workflows, flux-source-controller, nuclei, kots, melange, osv-scanner, kubescape, scorecard, apko, syft, gptscript, trivy, pulumi-language-dotnet, argo-events, crossplane, kargo, guac, bom,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: gitsign, pulumi-language-java, dagger, zarf, trufflehog, gitea, argo-workflows, flux-source-controller, nuclei, kots, melange, osv-scanner, kubescape, scorecard, apko, gitlab-runner, gptscript, syft, gomplate, pulumi-language-dotnet, argo-events, crossplane, kargo,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: pulumi-language-java, external-dns, datadog-agent, tw, crossplane-provider-aws-cloudfront, gitlab-kas, caddy, kots, trivy, kubescape, scorecard, ko, docker-cli-buildx, gptscript, rootlesskit, cert-manager, gomplate, spire-server, crossplane-provider-aws-dynamodb, gla...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: gitsign, pulumi-language-java, dagger, zarf, trufflehog, act, gitea, argo-workflows, flux-source-controller, nuclei, kots, melange, osv-scanner, kubescape, scorecard, apko, gitlab-runner, gptscript, syft, gomplate, pulumi-language-dotnet, argo-events, crossplane,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: grafana-fips, kubevela, pulumi-kubernetes-operator, pulumi, act, xeol, packer-fips, trivy-fips, pulumi-language-dotnet, pulumi-language-java, argocd-image-updater-fips, src-fingerprint, gitaly, external-secrets-operator-fips, gitlab-runner-fips, xeol-fips, cerbos,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: grafana-fips, kubevela, pulumi-kubernetes-operator, pulumi, act, xeol, packer-fips, trivy-fips, pulumi-language-dotnet, pulumi-language-java, argocd-image-updater-fips, src-fingerprint, gitaly, external-secrets-operator-fips, gitlab-runner-fips, xeol-fips, cerbos,...

CLEANSTART-2026-FO49462 Security fixes for ghsa-3xc5-wrhm-f963 applied in versions: 1.31.1-r0

Security vulnerability affects the pulumi-language-yaml package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: grafana-fips, kubevela, pulumi-kubernetes-operator, pulumi, xeol, packer-fips, trivy-fips, pulumi-language-dotnet, pulumi-language-java, argocd-image-updater-fips, src-fingerprint, gitaly, external-secrets-operator-fips, gitlab-runner-fips, xeol-fips, cerbos,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: grafana-fips, kubevela, pulumi-kubernetes-operator, pulumi, xeol, packer-fips, trivy-fips, pulumi-language-dotnet, pulumi-language-java, argocd-image-updater-fips, src-fingerprint, gitaly, external-secrets-operator-fips, gitlab-runner-fips, xeol-fips, cerbos,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: gitsign, pulumi-language-java, dagger, zarf, trufflehog, gitea, argo-workflows, flux-source-controller, nuclei, kots, melange, osv-scanner, kubescape, scorecard, apko, gitlab-runner, gptscript, syft, gomplate, pulumi-language-dotnet, argo-events, crossplane, kargo,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: gitsign, pulumi-language-java, dagger, zarf, trufflehog, gitea, argo-workflows, flux-source-controller, nuclei, kots, melange, osv-scanner, kubescape, scorecard, apko, gitlab-runner, gptscript, syft, gomplate, pulumi-language-dotnet, argo-events, crossplane, kargo,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: gitsign, pulumi-language-java, dagger, zarf, trufflehog, gitea, argo-workflows, flux-source-controller, nuclei, kots, melange, osv-scanner, kubescape, scorecard, apko, gitlab-runner, gptscript, syft, gomplate, pulumi-language-dotnet, argo-events, crossplane, kargo,...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: gitsign, pulumi-language-java, dagger, zarf, trufflehog, gitea, argo-workflows, flux-source-controller, nuclei, kots, melange, osv-scanner, kubescape, scorecard, apko, gitlab-runner, gptscript, syft, gomplate, pulumi-language-dotnet, argo-events, crossplane, kargo,...