GO-2026-6258 vulnerabilities

Vulnerabilities for packages: cortex-fips, tempo, thanos-fips, thanos-receive-controller-fips, cortex, cortex-geomys-fips, pulumi-language-yaml, thanos-receive-controller, tempo-fips, thanos...

GO-2026-6258 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, cortex, thanos...

GO-2026-6090 vulnerabilities

Vulnerabilities for packages: step-kms-plugin, skaffold, opentofu, rancher-fleet, tailscale, kubernetes-csi-external-health-monitor, kubernetes-dashboard-metrics-scraper, nri-kubernetes, kubernetes-event-exporter, falcosidekick, kubernetes-csi-node-driver-registrar, swagger, nri-prometheus, k8sgp...

CVE-2026-56862 vulnerabilities

Vulnerabilities for packages: step-kms-plugin, skaffold, opentofu, rancher-fleet, tailscale, kubernetes-csi-external-health-monitor, kubernetes-dashboard-metrics-scraper, nri-kubernetes, kubernetes-event-exporter, falcosidekick, kubernetes-csi-node-driver-registrar, swagger, nri-prometheus, k8sgp...

CVE-2026-56860 vulnerabilities

Vulnerabilities for packages: step-kms-plugin, skaffold, opentofu, rancher-fleet, tailscale, kubernetes-csi-external-health-monitor, kubernetes-dashboard-metrics-scraper, nri-kubernetes, kubernetes-event-exporter, falcosidekick, kubernetes-csi-node-driver-registrar, swagger, nri-prometheus, k8sgp...

GO-2026-6218 vulnerabilities

Vulnerabilities for packages: step-kms-plugin, skaffold, opentofu, rancher-fleet, tailscale, kubernetes-csi-external-health-monitor, kubernetes-dashboard-metrics-scraper, nri-kubernetes, kubernetes-event-exporter, falcosidekick, kubernetes-csi-node-driver-registrar, swagger, nri-prometheus, k8sgp...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: cilium-fips, librechat, cluster-api-fips, vault-secrets-operator, falco-no-driver, prometheus-node-exporter-fips, crossplane-provider-aws-sns-fips, eck-operator, cert-manager, goose, terraform-provider-azurerm-fips, crossplane-provider-aws-kinesis-fips,...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: cilium-fips, caddy, vexctl, kargo, prometheus-node-exporter-fips, eck-operator, cloud-provider-azure-fips, gptscript, tfsec, sftpgo-plugin-eventsearch, crossplane-provider-aws-dynamodb, wgcf, etcd-fips, prometheus-mysqld-exporter, vault-k8s,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: nuclei, skaffold, guac, snyk-cli, flux, scorecard, pulumi-kubernetes-operator, timoni, goreleaser, flux-source-controller, chezmoi, pulumi-language-dotnet, trivy, tfsec, argo-events, pulumi-language-yaml, k8sgpt, kaniko, kubevela, pulumi, k9s, wolfictl, grafana-alloy...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: nuclei, skaffold, guac, snyk-cli, flux, scorecard, pulumi-kubernetes-operator, timoni, goreleaser, flux-source-controller, chezmoi, pulumi-language-dotnet, trivy, tfsec, argo-events, pulumi-language-yaml, k8sgpt, kaniko, kubevela, pulumi, k9s, wolfictl, grafana-alloy...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: nuclei, skaffold, steampipe, guac, snyk-cli, teleport, flux, cerbos, scorecard, pulumi-kubernetes-operator, rancher-fleet, argo-cd, gitlab-runner, witness, flux-source-controller, chezmoi, pulumi-language-dotnet, trivy, tfsec, argo-events, pulumi-language-yaml, kanik...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: nuclei, step-kms-plugin, skaffold, teleport, guac, scorecard, opentofu, crossplane-provider-aws-rds, vault-benchmark, tekton-chains, act, docker-machine-driver-linode, step-issuer, terragrunt, ko, witness, go-discover, argo-events, crossplane-provider-azure-sql,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: nuclei, skaffold, steampipe, guac, snyk-cli, teleport, flux, cerbos, scorecard, pulumi-kubernetes-operator, goreleaser, rancher-fleet, act, argo-cd, gitlab-runner, terragrunt, witness, flux-source-controller, pulumi-language-dotnet, trivy, tfsec, argo-events,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: zarf, kargo, packer-fips, grype-db, trivy-fips, coder-fips, gptscript, tfsec, argo-workflows-fips, snyk-cli, kubescape-server-fips, coder, crossplane-fips, steampipe, rancher-fleet-fips, gitea-fips, crossplane, guac, trufflehog-fips, external-secrets-operator,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: zarf, kargo, packer-fips, grype-db, trivy-fips, coder-fips, gptscript, tfsec, argo-workflows-fips, snyk-cli, kubescape-server-fips, coder, crossplane-fips, steampipe, rancher-fleet-fips, gitea-fips, crossplane, guac, trufflehog-fips, external-secrets-operator,...

CLEANSTART-2026-FO49462 Security fixes for ghsa-3xc5-wrhm-f963 applied in versions: 1.31.1-r0

Security vulnerability affects the pulumi-language-yaml package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: zarf, kargo, packer-fips, grype-db, trivy-fips, gptscript, tfsec, argo-workflows-fips, snyk-cli, kubescape-server-fips, crossplane-fips, steampipe, rancher-fleet-fips, gitea-fips, crossplane, guac, trufflehog-fips, external-secrets-operator, gitlab-rails-ce, apko,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: zarf, kargo, packer-fips, grype-db, trivy-fips, gptscript, tfsec, argo-workflows-fips, snyk-cli, kubescape-server-fips, crossplane-fips, steampipe, rancher-fleet-fips, gitea-fips, crossplane, guac, trufflehog-fips, external-secrets-operator, gitlab-rails-ce, apko,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: nuclei, skaffold, steampipe, guac, snyk-cli, teleport, flux, cerbos, scorecard, pulumi-kubernetes-operator, rancher-fleet, argo-cd, gitlab-runner, witness, flux-source-controller, chezmoi, pulumi-language-dotnet, trivy, tfsec, argo-events, pulumi-language-yaml, kanik...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: nuclei, skaffold, steampipe, guac, snyk-cli, teleport, flux, cerbos, scorecard, pulumi-kubernetes-operator, rancher-fleet, argo-cd, gitlab-runner, witness, flux-source-controller, chezmoi, pulumi-language-dotnet, trivy, tfsec, argo-events, pulumi-language-yaml, kanik...