GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: nuclei, trufflehog, gitsign, act, argo-events, gomplate, kyverno, terragrunt, gitea, apko, dagger, grafana, melange, pulumi-language-yaml, teleport, tfsec, guac, flux-image-automation-controller, kots, osv-scanner, grafana-alloy, pulumi-language-java, flux,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: src-fingerprint-fips, gitaly-fips, kubevela, argo-workflows, bom, pulumi-kubernetes-operator, zarf, gptscript, google-osconfig-agent, crossplane-fips, kaniko-fips, kubescape-server, gitlab-rails-ce-fips, trufflehog-fips, kyverno, kubescape, coder,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: src-fingerprint-fips, gitaly-fips, kubevela, argo-workflows, bom, pulumi-kubernetes-operator, zarf, gptscript, google-osconfig-agent, crossplane-fips, kaniko-fips, kubescape-server, gitlab-rails-ce-fips, trufflehog-fips, kyverno, kubescape, coder,...

CLEANSTART-2026-FO49462 Security fixes for ghsa-3xc5-wrhm-f963 applied in versions: 1.31.1-r0

Security vulnerability affects the pulumi-language-yaml package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: src-fingerprint-fips, gitaly-fips, kubevela, argo-workflows, bom, pulumi-kubernetes-operator, zarf, gptscript, google-osconfig-agent, crossplane-fips, kaniko-fips, kubescape-server, gitlab-rails-ce-fips, trufflehog-fips, kyverno, kubescape, pulumi-language-dotnet, k9...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: src-fingerprint-fips, gitaly-fips, kubevela, argo-workflows, bom, pulumi-kubernetes-operator, zarf, gptscript, google-osconfig-agent, crossplane-fips, kaniko-fips, kubescape-server, gitlab-rails-ce-fips, trufflehog-fips, kyverno, kubescape, pulumi-language-dotnet, k9...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: nuclei, trufflehog, gitsign, argo-events, gomplate, kyverno, gitea, apko, dagger, grafana, melange, pulumi-language-yaml, teleport, tfsec, guac, flux-image-automation-controller, kots, osv-scanner, grafana-alloy, pulumi-language-java, flux, argocd-image-updater, syft...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: nuclei, trufflehog, gitsign, argo-events, gomplate, kyverno, gitea, apko, dagger, grafana, melange, pulumi-language-yaml, teleport, tfsec, guac, flux-image-automation-controller, kots, osv-scanner, grafana-alloy, pulumi-language-java, flux, argocd-image-updater, syft...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: nuclei, trufflehog, gitsign, argo-events, gomplate, kyverno, gitea, apko, dagger, grafana, melange, pulumi-language-yaml, teleport, tfsec, guac, flux-image-automation-controller, kots, osv-scanner, grafana-alloy, pulumi-language-java, flux, argocd-image-updater, syft...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: nuclei, trufflehog, gitsign, argo-events, gomplate, kyverno, gitea, apko, dagger, grafana, melange, pulumi-language-yaml, teleport, tfsec, guac, flux-image-automation-controller, kots, osv-scanner, grafana-alloy, pulumi-language-java, flux, argocd-image-updater, syft...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-dynamodb, trufflehog, flux-helm-controller, argo-events, crossplane-provider-aws-eks, crossplane-provider-aws-cloudfront, terragrunt, pulumi-language-yaml, flux-image-automation-controller, helm-push, pulumi-language-java, cluster-api,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-dynamodb, trufflehog, flux-helm-controller, argo-events, crossplane-provider-aws-eks, crossplane-provider-aws-cloudfront, terragrunt, pulumi-language-yaml, flux-image-automation-controller, helm-push, pulumi-language-java, cluster-api,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: crossplane-provider-keycloak, src-fingerprint-fips, gitaly-fips, kubevela, flux-notification-controller-fips, crossplane-provider-aws-sns-fips, crossplane-provider-aws-iam-fips, crossplane-provider-aws-s3-fips, crossplane-provider-aws-route53,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: kube-state-metrics, volume-modifier-for-k8s-fips, aws-efs-csi-driver-fips, runc, smarter-device-manager-fips, volume-modifier-for-k8s, gotenberg, hugo-extended, rekor-fips, terraform-provider-sendgrid, azure-aad-pod-identity-mic, hugo, helm-operator, clusterctl,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: slsa-verifier, dgraph, scorecard, prometheus-blackbox-exporter, falco, k3d, cortex, kubescape, aactl, kubevela, spark-operator, buildkitd, kubeflow, terraform-provider-sendgrid, up, src...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: prometheus-adapter-fips, kubevela, volume-modifier-for-k8s-fips, aws-efs-csi-driver-fips, timestamp-authority-fips, slsa-verifier, dynamic-localpv-provisioner-fips, smarter-device-manager-fips, kiam, falcoctl-fips, falco, cortex, prometheus-blackbox-exporter,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, secrets-store-csi-driver, kubewatch, git-lfs, haproxy-ingress, hugo, flux-helm-controller, coredns, pulumi-language-yaml, pulumi-language-java, rqlite, flux-source-controller, minio, ollama, kpt, terraform-provider-azurerm, weaviate,...