GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: gitea, flux-image-automation-controller, kubescape, rancher-fleet, teleport, trufflehog, pulumi-language-dotnet, kots, src-fingerprint, kubevela, tfsec, kaniko, witness, argocd-image-updater, snyk-cli, grype, flux-source-controller, bom, apko, nuclei, zot, dagger,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: cerbos, kaniko, argocd-image-updater, kots, kubescape, trivy-operator-fips, wolfictl, trufflehog-fips, packer-fips, steampipe, amazon-ssm-agent, gitsign, osv-scanner, crossplane, argo-workflows, gitlab-rails-ce-fips, trufflehog, pulumi-language-dotnet, xeol-fips,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: cerbos, kaniko, argocd-image-updater, kots, kubescape, trivy-operator-fips, wolfictl, trufflehog-fips, packer-fips, steampipe, amazon-ssm-agent, gitsign, osv-scanner, crossplane, argo-workflows, gitlab-rails-ce-fips, trufflehog, pulumi-language-dotnet, xeol-fips,...

CLEANSTART-2026-FO49462 Security fixes for ghsa-3xc5-wrhm-f963 applied in versions: 1.31.1-r0

Security vulnerability affects the pulumi-language-yaml package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: cerbos, kaniko, argocd-image-updater, kots, kubescape, trivy-operator-fips, commercial-chainloop-cli, wolfictl, trufflehog-fips, packer-fips, steampipe, amazon-ssm-agent, gitsign, osv-scanner, crossplane, argo-workflows, gitlab-rails-ce-fips, trufflehog,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: cerbos, kaniko, argocd-image-updater, kots, kubescape, trivy-operator-fips, commercial-chainloop-cli, wolfictl, trufflehog-fips, packer-fips, steampipe, amazon-ssm-agent, gitsign, osv-scanner, crossplane, argo-workflows, gitlab-rails-ce-fips, trufflehog,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: gitea, flux-image-automation-controller, kubescape, rancher-fleet, teleport, trufflehog, pulumi-language-dotnet, kots, src-fingerprint, kubevela, tfsec, kaniko, witness, argocd-image-updater, snyk-cli, grype, flux-source-controller, bom, apko, nuclei, zot, dagger,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: gitea, flux-image-automation-controller, kubescape, rancher-fleet, teleport, trufflehog, pulumi-language-dotnet, kots, src-fingerprint, kubevela, tfsec, kaniko, witness, argocd-image-updater, snyk-cli, grype, flux-source-controller, bom, apko, nuclei, zot, dagger,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: gitea, flux-image-automation-controller, kubescape, rancher-fleet, teleport, trufflehog, pulumi-language-dotnet, kots, src-fingerprint, kubevela, tfsec, kaniko, witness, argocd-image-updater, snyk-cli, grype, flux-source-controller, bom, apko, nuclei, zot, dagger,...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: gitea, flux-image-automation-controller, kubescape, rancher-fleet, teleport, trufflehog, pulumi-language-dotnet, kots, src-fingerprint, kubevela, tfsec, kaniko, witness, argocd-image-updater, snyk-cli, grype, flux-source-controller, bom, apko, nuclei, zot, dagger,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: atlantis, flux-image-automation-controller, pulumi-language-dotnet, q, witness, hydra, crossplane-provider-aws-rds, zot, flux-source-controller, apko, crossplane-provider-aws-firehose, boring-registry, crossplane-provider-aws-sns, extism, sops, trivy-operator, gitsig...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: atlantis, flux-image-automation-controller, pulumi-language-dotnet, q, witness, hydra, crossplane-provider-aws-rds, zot, flux-source-controller, apko, crossplane-provider-aws-firehose, boring-registry, crossplane-provider-aws-sns, extism, sops, trivy-operator, gitsig...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: cerbos, ratify, argocd-image-updater, crossplane-provider-keycloak, kots, kubescape, helm, crossplane-provider-aws-sns, crossplane-provider-aws-rds, helm-push, crossplane-provider-azure-authorization, omni-fips, trivy-operator-fips, wolfictl, hydra-fips, q,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: trust-manager, logstash-exporter, kaniko, nodetaint, kubeflow-katib, rekor, kaf, tkn, secrets-store-csi-driver-provider-aws, kubeflow-pipelines, oauth2-proxy, prometheus-node-exporter, prometheus-alertmanager, crossplane-provider-aws-cloudwatchlogs, sonobuoy,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: falco, buildkitd, aactl, slsa-verifier, spark-operator, src, up, kubescape, dgraph, k3d, kubeflow, terraform-provider-sendgrid, scorecard, cortex, kubevela, prometheus-blackbox-exporter...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: up, kubescape, bank-vaults-fips, kubernetes-csi-livenessprobe, prometheus-adapter-fips, buildkitd, spark-operator, aactl, kiam, terraform-provider-sendgrid-fips, cluster-autoscaler-fips, cortex, conftest-fips, falco, dgraph, slsa-verifier, src,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: atlantis, external-dns, pulumi-language-dotnet, amass, cortex, nodetaint, mc, haproxy-ingress, flux-source-controller, stakater-reloader, conftest, prometheus-adapter, kaf, metrics-server, hugo, kubeflow-katib, git-lfs, gobuster, gitness, memcached-exporter,...