GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: snyk-cli, pulumi-language-yaml, trufflehog, crossplane, rancher-fleet, terragrunt, kubescape, xeol, flux-source-controller, flux-image-automation-controller, nuclei, gomplate, wolfictl, gitaly, scorecard, apko, external-secrets-operator, grafana, grafana-alloy,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: kubevela, packer-fips, src-fingerprint, tfsec, zarf-fips, xeol, osv-scanner, k9s-fips, argocd-image-updater, grype-db, pulumi-kubernetes-operator, trivy-fips, argo-events, apko, melange, cloudbeat, amazon-ssm-agent, external-secrets-operator, nuclei, trufflehog-fips,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: kubevela, packer-fips, src-fingerprint, tfsec, zarf-fips, xeol, osv-scanner, k9s-fips, argocd-image-updater, grype-db, pulumi-kubernetes-operator, trivy-fips, argo-events, apko, melange, cloudbeat, amazon-ssm-agent, external-secrets-operator, nuclei, trufflehog-fips,...

CLEANSTART-2026-FO49462 Security fixes for ghsa-3xc5-wrhm-f963 applied in versions: 1.31.1-r0

Security vulnerability affects the pulumi-language-yaml package. This issue is resolved in later releases. See references for vulnerability details...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: kubevela, packer-fips, src-fingerprint, tfsec, zarf-fips, xeol, osv-scanner, k9s-fips, argocd-image-updater, grype-db, pulumi-kubernetes-operator, trivy-fips, argo-events, apko, livekit-cli, melange, cloudbeat, amazon-ssm-agent, external-secrets-operator, nuclei,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: kubevela, packer-fips, src-fingerprint, tfsec, zarf-fips, xeol, osv-scanner, k9s-fips, argocd-image-updater, grype-db, pulumi-kubernetes-operator, trivy-fips, argo-events, apko, livekit-cli, melange, cloudbeat, amazon-ssm-agent, external-secrets-operator, nuclei,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: snyk-cli, pulumi-language-yaml, trufflehog, crossplane, rancher-fleet, kubescape, xeol, flux-source-controller, flux-image-automation-controller, nuclei, gomplate, wolfictl, gitaly, scorecard, apko, external-secrets-operator, grafana, grafana-alloy, melange, nfpm,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: snyk-cli, pulumi-language-yaml, trufflehog, crossplane, rancher-fleet, kubescape, xeol, flux-source-controller, flux-image-automation-controller, nuclei, gomplate, wolfictl, gitaly, scorecard, apko, external-secrets-operator, grafana, grafana-alloy, melange, nfpm,...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: snyk-cli, pulumi-language-yaml, trufflehog, crossplane, rancher-fleet, kubescape, xeol, flux-source-controller, flux-image-automation-controller, nuclei, gomplate, wolfictl, gitaly, scorecard, apko, external-secrets-operator, grafana, grafana-alloy, melange, nfpm,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: snyk-cli, pulumi-language-yaml, trufflehog, crossplane, rancher-fleet, kubescape, xeol, flux-source-controller, flux-image-automation-controller, nuclei, gomplate, wolfictl, gitaly, scorecard, apko, external-secrets-operator, grafana, grafana-alloy, melange, nfpm,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: snyk-cli, pulumi-language-yaml, rancher-fleet, terragrunt, xeol, crossplane-provider-aws-s3, ksops, crossplane-provider-aws-eks, crossplane-provider-aws-kms, gomplate, wolfictl, crossplane-provider-aws-lambda, crossplane-provider-aws-dynamodb, lazygit,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: snyk-cli, pulumi-language-yaml, rancher-fleet, terragrunt, xeol, crossplane-provider-aws-s3, ksops, crossplane-provider-aws-eks, crossplane-provider-aws-kms, gomplate, wolfictl, crossplane-provider-aws-lambda, crossplane-provider-aws-dynamodb, lazygit,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: kubevela, packer-fips, src-fingerprint, tfsec, crossplane-provider-azure-storage, terraform-provider-pagerduty-fips, xeol, crossplane-provider-aws-memorydb, osv-scanner, k9s-fips, argocd-image-updater, crossplane-provider-aws-elasticache-fips, grype-db,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, prometheus-elasticsearch-exporter-fips, spire-server, temporal-server-fips, pulumi-kubernetes-operator, tflint, crossplane-provider-aws-route53, melange, kubeadm-controlplane-controller, weaviate, timoni, crossplane-provider-aws, cortex,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: scorecard, kubeflow, kubevela, kubescape, cortex, falco, dgraph, spark-operator, k3d, prometheus-blackbox-exporter, terraform-provider-sendgrid, aactl, src, slsa-verifier, up, buildkitd...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubevela, k3d, falco, conftest-fips, terraform-provider-sendgrid-fips, prometheus-adapter-fips, slsa-verifier, buildkitd, scorecard, metrics-server-fips, cluster-autoscaler-fips, terraform-provider-sendgrid, kubeflow, vault-csi-provider,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: grpcurl, pulumi-language-yaml, certificate-transparency, gomplate, src, cosign, terraform-provider-aws, kubevela, pulumi-language-java, cortex, helm, kots, terraform, ip-masq-agent, sigstore-scaffolding, fuse-overlayfs-snapshotter, pulumi-language-dotnet,...